Проблем с Flash player?

5 септември 201214 г.

Здравейте нов съм във форума

Писах в http://www.kaldata.c...er/page__st__20 някой да ми отговори но виждам че никой няма да ми помогне

затова реших да направя нова тема

сега пише просто само ---> D:\\WINDOWS\system32\Flash\FlashPlayer.exe restart

без папката Macromed

http://prikachi.com/...29/5221329f.jpg ---> това става всеки път като включа компютъра почти мога да го ползвам с таск мениджър и така успявам да го оправя

http://prikachi.com/...41/5221341Z.jpg --->ако успея да го оправя в Windows Task Manager

се вижда програмката как още е пусната смятам че е това изтрих Flash Player дори и папките и абсолютно всичко но интересното е че пак мога да гледам youtube.com vbox7.com клипчета от Google Chrome дори да не мога да гледам не ме интересува стига само това да престане да ми се показва

http://prikachi.com/...37/5221337r.jpg ---> благодарение на тази програмка ако извадя касмет от 1-2 път ресва се и програмите се виждат отново понякога забива и пак се включва и за това трябва пак да пускам програмката винаги ми пише че губя нещо от Google Chrome и Internet Explorer

не знам дали е вирус просто ако може да се оправи ще се радвам благодаря предварително :-)

Редактирано 18 септември 201214 г. от B-boy[StyLe] (преглед на промените)

Емил Костов

Hardware Team

Пол:Мъж
Град:Плевен
Интереси:Интернет,Компютърни игри и програми. WEB design

5 септември 201214 г.

1.Ако е вирус посети темата: http://www.kaldata.com/forums/topic/132819-%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D0%B0%D1%82%D0%B0-%D0%BC%D0%B8-%D0%B5-%D0%B8%D0%BD%D1%84%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%B0%D0%BD%D0%B0-%D0%BA%D0%B0%D0%BA%D0%B2%D0%BE-%D0%B4%D0%B0-%D0%BF%D1%80%D0%B0%D0%B2%D1%8F-%D1%81%D0%B5%D0%B3%D0%B0/

2.Имаш ли възможност да пуснеш system restore?

5 септември 201214 г.

Автор

DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 7.0.5730.13 Run by jjjj at 22:11:16 on 2012-09-05 Microsoft Windows XP Professional 5.1.2600.2.1251.1.1033.18.511.198 [GMT 3:00] . . ============== Running Processes ================ . D:WINDOWSExplorer.EXE D:WINDOWSsystem32spoolsv.exe D:Documents and SettingsjjjjApplication Datactfmon.exe D:Program FilesMalwarebytes' Anti-Malwarembamservice.exe D:WINDOWSsystem32nvsvc32.exe D:Documents and SettingsjjjjLocal SettingsApplication DataGoogleChromeApplicationchrome.exe D:WINDOWSSystem32alg.exe D:WINDOWSsystem32FlashFlashPlayer.exe D:Program FilesUnlockerUnlockerAssistant.exe D:WINDOWSSOUNDMAN.EXE D:WINDOWSsystem32rundll32.exe D:WINDOWSsystem32FlashFlashPlayer.exe D:WINDOWSsystem32wscntfy.exe D:WINDOWSsystem32FlashFlashPlayer.exe D:WINDOWSsystem32RUNDLL32.EXE D:WINDOWSsystem32ctfmon.exe D:WINDOWSsystem32FlashFlashPlayer.exe D:WINDOWSDatecsFlex2K.exe D:Documents and SettingsjjjjLocal SettingsApplication DataGoogleUpdate1.3.21.115GoogleCrashHandler.exe D:WINDOWSsystem32wuauclt.exe D:WINDOWSsystem32wbemwmiprvse.exe D:WINDOWSSystem32svchost.exe -k netsvcs D:WINDOWSsystem32svchost.exe -k WudfServiceGroup D:WINDOWSsystem32svchost.exe -k NetworkService D:WINDOWSsystem32svchost.exe -k LocalService D:WINDOWSsystem32svchost.exe -k bthsvcs D:WINDOWSsystem32svchost.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://mystart.incredibar.com/mb174?a=6OyN2Z64Qj&i=26 BHO: {BA0454C5-FD30-428E-8DB9-3FF87A612F64} - <orphaned> uRun: [NvMediaCenter] RUNDLL32.EXE d:windowssystem32NVMCTRAY.DLL,NvTaskbarInit uRun: [uTorrent] "d:program filesutorrentuTorrent.exe" /MINIMIZED uRun: [ctfmon.exe] d:windowssystem32ctfmon.exe uRun: [HKCU] c:windowssystem32mozillaFirefox.exe uRun: [Google Update] "d:documents and settingsjjjjlocal settingsapplication datagoogleupdateGoogleUpdate.exe" /c uRun: [Flasher] d:windowssystem32flashFlashPlayer.exe mRun: [NvCplDaemon] RUNDLL32.EXE d:windowssystem32NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [unlockerAssistant] "d:program filesunlockerUnlockerAssistant.exe" -H mRun: [soundMan] SOUNDMAN.EXE mRun: [Malwarebytes' Anti-Malware] "d:program filesmalwarebytes' anti-malwarembamgui.exe" /starttray mRun: [HKLM] c:windowssystem32mozillaFirefox.exe mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent mRun: [Flasher] d:windowssystem32flashFlashPlayer.exe uExplorerRun: [Policies] c:windowssystem32mozillaFirefox.exe uExplorerRun: [FlashPlay] d:windowssystem32flashFlashPlayer.exe uExplorerRun: [Policies] c:windowssystem32mozillaFirefox.exe uExplorerRun: [FlashPlay] d:windowssystem32flashFlashPlayer.exe StartupFolder: d:docume~1alluse~1startm~1programsstartupflexty~1.lnk - d:windowsdatecsFlex2K.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-System: ConsentPromptBehaviorAdmin = dword:0 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: E&xport to Microsoft Excel - d:progra~1micros~2office11EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - d:program filesmessengermsmsgs.exe TCP: Interfaces{EA8F15FF-EB9E-45D6-8601-D211990F36E5} : NameServer = 46.233.0.3,46.233.0.4 Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - d:program filescommon filesskypeSkype4COM.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - d:windowssystem32wpdshserviceobj.dll mASetup: {034PNT05-B5A0-M34M-R158-K33E54B0W1D5} - d:windowssystem32flashFlashPlayer.exe Restart mASetup: {222BK3S5-32G5-27BS-X3FY-O278W15Y7S5Q} - c:windowssystem32mozillaFirefox.exe mASetup: {568197CC-0EFF-2D7A-D52E-6B57F18D4F98} - d:windowssystem32macromedflashFlashPlayer.exe s mASetup: {C74EE63C-0C2F-68F5-0938-A84D9F1EAC42} - d:documents and settingsjjjjapplication datamacromedflashFlashPlayr.exe s . ============= SERVICES / DRIVERS =============== . R2 ctfmon;ctfmon;d:documents and settingsjjjjapplication datactfmon.exe [2012-8-8 57344] R2 MBAMService;MBAMService;d:program filesmalwarebytes' anti-malwarembamservice.exe [2012-8-9 655944] R3 MBAMProtector;MBAMProtector;d:windowssystem32driversmbam.sys [2012-8-9 22344] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;d:windowssystem32macromedflashflashplayerupdateservice.exe --> d:windowssystem32macromedflashFlashPlayerUpdateService.exe [?] . =============== Created Last 30 ================ . 2012-09-05 14:32:39 -------- d-----w- D:Grimm.S02E04.HDTV.XviD-D3L 2012-09-04 00:25:23 274304 -c--a-w- d:windowssystem32dllcachebthport.sys 2012-09-04 00:25:23 274304 ----a-w- d:windowssystem32driversbthport.sys 2012-09-04 00:25:23 18944 -c--a-w- d:windowssystem32dllcachebthusb.sys 2012-09-04 00:25:23 18944 ----a-w- d:windowssystem32driversBTHUSB.SYS 2012-09-04 00:25:08 -------- d-----w- d:documents and settingsjjjjapplication dataBluetoothDriverInstaller 2012-09-04 00:21:19 -------- d-----w- d:program filesPerion 2012-09-03 15:36:11 -------- d-----w- D:Kid vs Kat s02 ep01-08 2012-09-03 12:57:32 -------- d-----w- d:documents and settingsjjjjlocal settingsapplication dataIdentities 2012-09-02 19:26:57 -------- d-----w- D:Men.In.Black.3.2012.DVDRip.XviD-DEPRiVED 2012-09-02 02:15:08 -------- d-----w- D:Bleach OST Collection 2012-09-02 00:47:03 -------- d-----w- D:The.Polar.Express.2004.BRRip.BG.Audio.BiTANeM 2012-09-02 00:27:46 -------- d-----w- D:Howl's.Moving.Castle.2004.DVDRip.XviD.BGAUDiO-ZmN 2012-08-31 22:34:18 -------- d-----w- d:program filesIrfanView 2012-08-30 18:38:19 -------- d-----w- D:From.Beyond.1986.UNRATED.DC.480p.HDRip.XviD.AC3-AsA 2012-08-29 15:17:31 -------- d-s---w- d:windowsDownloaded Program Files 2012-08-27 00:35:33 -------- d-----w- d:program filesDefcon 2012-08-26 21:12:29 -------- d-----w- D:games 2012-08-26 20:24:07 257291214 ----a-w- D:CS1.6 v44 FULL.exe 2012-08-23 12:55:30 -------- d-----w- D:Starship.Troopers.Invasion.2012.BRRip.XviD.Ac3.Feel-Free 2012-08-18 10:52:07 18944 ----a-w- d:windowssystem32spoolprtprocsw32x86mdippr.dll 2012-08-18 10:52:07 17920 ----a-w- d:windowssystem32mdimon.dll 2012-08-18 10:49:49 -------- d-----w- d:program filesMicrosoft ActiveSync 2012-08-18 10:48:26 -------- d-----w- d:windowsSHELLNEW 2012-08-13 07:12:15 -------- d-----w- d:windowssystem32appmgmt 2012-08-12 20:41:36 -------- d-----w- d:windowssystem32wbemLogs 2012-08-12 12:19:15 -------- d-----w- d:documents and settingsjjjjapplication dataBabylonToolbar 2012-08-12 12:18:36 -------- d-----w- d:documents and settingsall usersapplication dataBabylon 2012-08-12 12:18:35 -------- d-----w- d:documents and settingsjjjjapplication dataBabylon 2012-08-12 12:18:23 -------- d-----w- d:documents and settingsjjjjapplication dataYourFileDownloader 2012-08-12 11:29:54 -------- d-----w- d:program filesTSearch 2012-08-12 11:29:41 -------- d-----w- d:program filesOpenApp 2012-08-12 11:29:19 -------- d-----w- d:program filessmartdl 2012-08-12 11:13:45 -------- d-----w- d:documents and settingsjjjjapplication dataDriverCure 2012-08-12 11:13:44 -------- d-----w- d:documents and settingsjjjjapplication dataSpeedyPC Software 2012-08-12 11:13:26 -------- d-----w- d:program filescommon filesSpeedyPC Software 2012-08-12 11:13:23 -------- d-----w- d:program filesSpeedyPC Software 2012-08-12 11:13:23 -------- d-----w- d:documents and settingsall usersapplication dataSpeedyPC Software 2012-08-10 15:00:31 -------- d-sh--r- d:windowssystem32Flash 2012-08-10 08:58:36 -------- d-----w- D:TDSSKiller_Quarantine 2012-08-09 19:45:48 823 ----a-w- d:documents and settingsjjjjapplication datajjjjv1.18.0 - Trial version.vbs 2012-08-09 10:13:25 -------- d-----w- d:documents and settingsjjjjapplication dataDAEMON Tools Pro 2012-08-09 10:12:10 -------- d-----w- d:documents and settingsall usersapplication dataDAEMON Tools Lite 2012-08-09 10:08:17 -------- d-----w- d:documents and settingsjjjjapplication dataDAEMON Tools Lite 2012-08-08 22:33:06 -------- d-----w- d:documents and settingsjjjjapplication dataMalwarebytes 2012-08-08 22:32:20 -------- d-----w- d:documents and settingsall usersapplication dataMalwarebytes 2012-08-08 22:32:19 22344 ----a-w- d:windowssystem32driversmbam.sys 2012-08-08 22:32:19 -------- d-----w- d:program filesMalwarebytes' Anti-Malware 2012-08-07 23:10:30 3072 ----a-w- d:windowssystem32driversaudstub.sys 2012-08-07 23:09:53 57472 ----a-w- d:windowssystem32driversredbook.sys 2012-08-07 23:09:33 20992 ----a-w- d:windowssystem32driversRTL8139.sys 2012-08-07 23:09:25 3902603 ----a-r- d:windowssystem32nv4_disp.dll 2012-08-07 23:09:25 1341339 -c--a-w- d:windowssystem32dllcachenv4_mini.sys 2012-08-07 23:09:25 1341339 ----a-r- d:windowssystem32driversnv4_mini.sys 2012-08-07 23:09:16 5504 ----a-w- d:windowssystem32driversintelide.sys 2012-08-07 23:09:12 74240 ----a-w- d:windowssystem32usbui.dll 2012-08-07 23:09:09 42368 ----a-w- d:windowssystem32driversAGP440.SYS 2012-08-07 23:05:27 -------- d-----r- d:documents and settingsall usersDocuments 2012-08-07 23:05:01 13753 ----a-r- d:windowsSET8.tmp 2012-08-07 23:04:58 1086058 ----a-r- d:windowsSET4.tmp 2012-08-07 23:04:56 1042903 ----a-r- d:windowsSET3.tmp 2012-08-07 23:04:51 -------- d-----w- d:windowssystem32CatRoot2 2012-08-07 23:04:51 -------- d-----w- d:windowssystem32CatRoot 2012-08-07 23:04:22 -------- d-----w- D:Documents and Settings . ==================== Find3M ==================== . . ============= FINISH: 22:12:05.15 ===============

Редактирано 5 септември 201214 г. от gigir (преглед на промените)

9 септември 201214 г.

Автор

Добре колко още да чакам за отговор ? компютъра ми стана се по-бавен всеки изминат ден

9 септември 201214 г.

Добре колко още да чакам за отговор ?
компютъра ми стана се по-бавен всеки изминат ден

Ще се абстрахирам от жалките ти познания по езикознание. Давам по темата.

Тук никой не ти е длъжен. Ще се намери някой, когато има време.

Ако ти е толкоз зор, прави бекъп на снимки, клипове, филми и документи и преинсталирай!

9 септември 201214 г.

Колкото се наложи. Тук никой не е на заплата.

Отделно сте пуснали темата в грешния раздел и сме я пропуснали...

Я качете този файл

d:documents and settingsjjjjapplication datactfmon.exe

на http://file.bg/ и публикувайте линк за download в следващия си пост.

9 септември 201214 г.

Автор

http://file.bg/c184302pzAhF

съжалявам не знаех къде да пусна темата моя грешка...

исках да пиша ако може някои да ми помогне не исках да обидя никого просто компютъра става по зле всеки ден докато чакам...

Редактирано 9 септември 201214 г. от gigir (преглед на промените)

9 септември 201214 г.

Ок, да проверим първо за гадинки и после ще се опитаме да оправим проблема с Flash Player.

1. Изтеглете ComboFix от BleepingComputer

и го запазете (бутон Save -> Save as) ComboFix на вашия десктоп:

След приключване на изтеглянето на ComboFix, иконката на програмата би трябвало да изглежда така:

2. Затворете всички работещи приложения, отворени прозорци и програми работещи във фонов режим. Спрете временно защитата в реално време на антивирусната програма и на другите програми за сигурност, ако има такива.

3. Стартирайте с двоен клик Combofix.exe. Изберете YES, за да се съгласите с условията за използване на програмата. Важно: По време на работата на ComboFix не бива да се движи мишката и да се натискат клавиши от клавиатурата. Просто търпеливо оставете ComboFix да си свърши работата, без да използвате компютъра за други цели.

4. ComboFix ще провери дали Windows Recovery Console e инсталиранa.

*Ако Windows Recovery Console не е инсталирана, ще е необходимо да използвате YES за инсталация на Windows Recovery Console

*Ако Windows Recovery Console е инсталирана, ComboFix ще продължи работата си.

Забележка: Необходимо е да сте свързани към Интернет за да може Windows Recovery Console да се изтегли.

След инсталация на Windows Recovery Console потвърдете с YES, за да продължите напред. Снимка:

5. ComboFix ще спре временно Интернет връзката, но след като приключи работата на програмата тази връзка ще бъде възстановена автоматично. ComboFix ще сканира за проблеми и за заразени файлове, като това може да отнеме известно време. Моля да бъдете търпеливи. Ако има проблем с Интернет връзката след приключване на работата на ComboFix, моля да прочетете това: Manually restoring the Internet connection section.

6. Когато работата на ComboFix приключи, ще се появи текстов документ (log) в Notepad:

Копирайте с (Copy) и поставете с (Paste) съдържанието на лога в следващия си коментар.

9 септември 201214 г.

Автор

ComboFix 12-09-09.02 - jjjj 09/09/2012 22:25:49.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.2.1251.1.1033.18.511.162 [GMT 3:00] Running from: d:documents and settingsjjjjDesktopComboFix.exe . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:windowssystem32MozillaFirefox.exe d:documents and settingsjjjjApplication Dataaddons.dat d:documents and settingsjjjjApplication Datactfmon.exe d:windowssystem32FlashFlashPlayer.exe . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------Legacy_CTFMON -------Service_ctfmon . . ((((((((((((((((((((((((( Files Created from 2012-08-09 to 2012-09-09 ))))))))))))))))))))))))))))))) . . 2012-09-08 23:06 . 2012-09-09 01:29 -------- d-----w- D:Prometheus.2012.R5.CAM-AUDiO.XViD-FANTA 2012-09-07 01:42 . 2012-09-07 02:51 751121163 ----a-w- D:swine_en.exe 2012-09-07 00:23 . 2012-09-09 01:25 -------- d-----w- D:The.Cabin.in.the.Woods.2011.BRRip.x264.AAC-LYCAN 2012-09-04 00:25 . 2004-08-03 20:10 274304 -c--a-w- d:windowssystem32dllcachebthport.sys 2012-09-04 00:25 . 2004-08-03 20:10 274304 ----a-w- d:windowssystem32driversbthport.sys 2012-09-04 00:25 . 2004-08-03 20:10 18944 -c--a-w- d:windowssystem32dllcachebthusb.sys 2012-09-04 00:25 . 2004-08-03 20:10 18944 ----a-w- d:windowssystem32driversBTHUSB.SYS 2012-09-04 00:25 . 2012-09-04 00:33 -------- d-----w- d:documents and settingsjjjjApplication DataBluetoothDriverInstaller 2012-09-04 00:21 . 2012-09-04 00:21 -------- d-----w- d:program filesPerion 2012-09-04 00:16 . 2012-09-04 00:33 -------- d---a-w- d:documents and settingsAll UsersApplication DataTEMP 2012-09-03 15:36 . 2012-09-03 21:43 -------- d-----w- D:Kid vs Kat s02 ep01-08 2012-09-03 12:57 . 2012-09-03 12:57 -------- d-----w- d:documents and settingsjjjjLocal SettingsApplication DataIdentities 2012-09-02 02:15 . 2012-09-02 02:20 -------- d-----w- D:Bleach OST Collection 2012-08-31 22:34 . 2012-08-31 22:34 -------- d-----w- d:program filesIrfanView 2012-08-30 18:38 . 2012-09-01 16:50 -------- d-----w- D:From.Beyond.1986.UNRATED.DC.480p.HDRip.XviD.AC3-AsA 2012-08-29 15:17 . 2012-08-29 15:17 -------- d-s---w- d:windowsDownloaded Program Files 2012-08-27 00:35 . 2012-08-27 00:36 -------- d-----w- d:program filesDefcon 2012-08-26 21:12 . 2012-08-27 12:36 -------- d-----w- D:games 2012-08-26 20:24 . 2012-08-26 21:08 257291214 ----a-w- D:CS1.6 v44 FULL.exe 2012-08-23 12:55 . 2012-08-24 22:06 -------- d-----w- D:Starship.Troopers.Invasion.2012.BRRip.XviD.Ac3.Feel-Free 2012-08-18 10:52 . 2003-06-18 14:31 18944 ----a-w- d:windowssystem32Spoolprtprocsw32x86mdippr.dll 2012-08-18 10:52 . 2003-06-18 14:31 17920 ----a-w- d:windowssystem32mdimon.dll 2012-08-18 10:49 . 2012-08-18 10:49 -------- d-----w- d:program filesMicrosoft.NET 2012-08-18 10:49 . 2012-08-18 10:49 -------- d-----w- d:program filesMicrosoft ActiveSync 2012-08-18 10:48 . 2012-08-18 10:49 -------- d-----w- d:windowsSHELLNEW 2012-08-18 10:45 . 2012-08-18 10:45 -------- d-----r- D:MSOCache 2012-08-12 20:41 . 2012-09-09 14:12 -------- d-----w- d:windowssystem32wbemLogs 2012-08-12 12:18 . 2012-08-12 12:18 -------- d-----w- d:documents and settingsAll UsersApplication DataBabylon 2012-08-12 12:18 . 2012-08-12 12:18 -------- d-----w- d:documents and settingsjjjjApplication DataBabylon 2012-08-12 12:18 . 2012-08-12 12:18 -------- d-----w- d:documents and settingsjjjjApplication DataYourFileDownloader 2012-08-12 11:29 . 2012-08-12 11:32 -------- d-----w- d:program filesTSearch 2012-08-12 11:29 . 2012-09-04 00:23 -------- d-----w- d:program filesOpenApp 2012-08-12 11:29 . 2012-08-12 12:16 -------- d-----w- d:program filessmartdl 2012-08-12 11:13 . 2012-08-12 11:13 -------- d-----w- d:documents and settingsjjjjApplication DataDriverCure 2012-08-12 11:13 . 2012-08-12 11:13 -------- d-----w- d:documents and settingsjjjjApplication DataSpeedyPC Software 2012-08-12 11:13 . 2012-08-12 11:13 -------- d-----w- d:program filesCommon FilesSpeedyPC Software 2012-08-12 11:13 . 2012-08-12 11:13 -------- d-----w- d:documents and settingsAll UsersApplication DataSpeedyPC Software 2012-08-12 11:13 . 2012-08-12 11:13 -------- d-----w- d:program filesSpeedyPC Software . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-09 14:12 . 2012-08-09 19:45 823 ----a-w- d:documents and settingsjjjjApplication Datajjjjv1.18.0 - Trial version.vbs 2012-07-03 10:46 . 2012-08-08 22:32 22344 ----a-w- d:windowssystem32driversmbam.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun] "NvMediaCenter"="d:windowssystem32NVMCTRAY.DLL" [2003-07-28 49152] "uTorrent"="d:program filesuTorrentuTorrent.exe" [2012-08-07 1022352] . [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] "NvCplDaemon"="d:windowssystem32NvCpl.dll" [2003-07-28 4841472] "nwiz"="nwiz.exe" [2003-07-28 323584] "UnlockerAssistant"="d:program filesUnlockerUnlockerAssistant.exe" [2010-07-04 17408] "SoundMan"="SOUNDMAN.EXE" [2003-04-24 54784] "Malwarebytes' Anti-Malware"="d:program filesMalwarebytes' Anti-Malwarembamgui.exe" [2012-07-03 462920] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-03 110592] . d:documents and settingsAll UsersStart MenuProgramsStartup FlexType 2K.lnk - d:windowsDatecsFlex2K.exe [2012-8-8 151552] . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem] "ConsentPromptBehaviorAdmin"= 0 (0x0) . [HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList] "%windir%Network Diagnosticxpnetdiag.exe"= "%windir%system32sessmgr.exe"= "d:Program FilesuTorrentuTorrent.exe"= "d:gamesCS1.6v44hl.exe"= "d:Program FilesDefcondefcon.exe"= "d:Program FilesSkypePhoneSkype.exe"= . R2 MBAMService;MBAMService;d:program filesMalwarebytes' Anti-Malwarembamservice.exe [8/9/2012 1:32 AM 655944] R3 MBAMProtector;MBAMProtector;d:windowssystem32driversmbam.sys [8/9/2012 1:32 AM 22344] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;d:windowssystem32MacromedFlashFlashPlayerUpdateService.exe --> d:windowssystem32MacromedFlashFlashPlayerUpdateService.exe [?] . --- Other Services/Drivers In Memory --- . *NewlyCreated* - WS2IFSL . Contents of the 'Scheduled Tasks' folder . 2012-09-08 d:windowsTasksGoogleUpdateTaskUserS-1-5-21-220523388-789336058-1060284298-1003Core.job - d:documents and settingsjjjjLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2012-08-12 10:05] . 2012-09-09 d:windowsTasksGoogleUpdateTaskUserS-1-5-21-220523388-789336058-1060284298-1003UA.job - d:documents and settingsjjjjLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2012-08-12 10:05] . 2012-09-09 d:windowsTasksSpeedyPC Pro.job - d:program filesSpeedyPC SoftwareSpeedyPCSpeedyPC.exe [2012-08-09 20:44] . 2012-09-09 d:windowsTasksSpeedyPC Registration3.job - d:program filesCommon FilesSpeedyPC SoftwareUUS3UUS3.dll [2012-07-06 20:52] . 2012-09-09 d:windowsTasksSpeedyPC Update Version3 Startup Task.job - d:program filesCommon FilesSpeedyPC SoftwareUUS3SpeedyPC_Update3.exe [2012-07-06 20:52] . 2012-09-02 d:windowsTasksSpeedyPC Update Version3.job - d:program filesCommon FilesSpeedyPC SoftwareUUS3SpeedyPC_Update3.exe [2012-07-06 20:52] . . ------- Supplementary Scan ------- . uStart Page = hxxp://mystart.incredibar.com/mb174?a=6OyN2Z64Qj&i=26 IE: E&xport to Microsoft Excel - d:progra~1MICROS~2OFFICE11EXCEL.EXE/3000 TCP: Interfaces{EA8F15FF-EB9E-45D6-8601-D211990F36E5}: NameServer = 46.233.0.3,46.233.0.4 . - - - - ORPHANS REMOVED - - - - . HKCU-Run-Flasher - d:windowssystem32FlashFlashPlayer.exe HKLM-Run-Flasher - d:windowssystem32FlashFlashPlayer.exe SafeBoot-07660080.sys HKLM_ActiveSetup-{568197CC-0EFF-2D7A-D52E-6B57F18D4F98} - d:windowssystem32MacromedFlashFlashPlayer.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-09-09 22:40 Windows 5.1.2600 Service Pack 2 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'explorer.exe'(3456) d:windowssystem32newdll.dll d:windowssystem32wpdshserviceobj.dll d:windowssystem32portabledevicetypes.dll d:windowssystem32portabledeviceapi.dll . ------------------------ Other Running Processes ------------------------ . d:windowsSOUNDMAN.EXE d:windowssystem32rundll32.exe d:windowssystem32RUNDLL32.EXE d:windowssystem32nvsvc32.exe d:windowssystem32wscntfy.exe . ************************************************************************** . Completion time: 2012-09-09 22:44:08 - machine was rebooted ComboFix-quarantined-files.txt 2012-09-09 19:44 . Pre-Run: 247,407,702,016 bytes free Post-Run: 247,325,110,272 bytes free . WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)WINDOWS [operating systems] c:cmdconsBOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(2)WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect multi(0)disk(0)rdisk(0)partition(1)WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - B72277D34C7FB56308C2958FB407E21F

9 септември 201214 г.

Защо ми се струва, че имате два Windows-a на компютъра?

c:windowssystem32MozillaFirefox.exe

d:windowssystem32FlashFlashPlayer.exe

multi(0)disk(0)rdisk(0)partition(2)WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

multi(0)disk(0)rdisk(0)partition(1)WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

Имате и тонове боклуци - тулбари, програми за оптимизация, FlexType... Голяма мацаница.

Ок, да премахнем тулбарите и Adobe Flash и да видим дали има подобрение:

Стартирайте отново програмата AdwCleaner (by Xplode).

Затворете всички стартирани програми и браузъри
Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
Този път маркирайте Delete
Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта.
Моля, да публикувате съдържанието на този лог в отговора си
Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s1].txt.

Изтеглете Adobe Flash Uninstaller и го запазете на десктопа.
Затворете всички браузъри и го стартирайте.
Рестартирайте компютъра.

Отворете notepad и с copy/paste въведете следната информация.

Driver::

AdobeFlashPlayerUpdateSvc

File::

d:windowsTasksSpeedyPC Pro.job

d:windowsTasksSpeedyPC Registration3.job

d:windowsTasksSpeedyPC Update Version3 Startup Task.job

d:windowsTasksSpeedyPC Update Version3.job

Folder::

d:windowssystem32Macromed

d:program filesPerion

d:program filesTSearch

d:program filesOpenApp

d:program filessmartdl

d:documents and settingsjjjjApplication DataDriverCure

d:documents and settingsjjjjApplication DataSpeedyPC Software

d:program filesCommon FilesSpeedyPC Software

d:documents and settingsAll UsersApplication DataSpeedyPC Software

d:program filesSpeedyPC Software

d:documents and settingsAll UsersApplication DataBabylon

d:documents and settingsjjjjApplication DataBabylon

d:documents and settingsjjjjApplication DataYourFileDownloader

DDS::

uStart Page = hxxp://mystart.incredibar.com/mb174?a=6OyN2Z64Qj&i=26
Запазете файла с име CFScript и го провлачете и пуснете в Combofix (както е показано на картинката отдолу).
По време на сканиране от страна на ComboFix не стартирайте никакви други приложения, не натискайте клавиши от клавиатурата и не местете мишката !
Публикувайте лог файла, който ще се създаде след рестарта на компютъра в следващия си пост.

9 септември 201214 г.

Автор

ComboFix 12-09-09.02 - jjjj 09/09/2012 23:45:04.2.1 - x86

Microsoft Windows XP Professional 5.1.2600.2.1251.1.1033.18.511.265 [GMT 3:00]

Running from: d:documents and settingsjjjjDesktopComboFix.exe

Command switches used :: d:documents and settingsjjjjDesktopCFScript.txt

.

FILE ::

"d:windowsTasksSpeedyPC Pro.job"

"d:windowsTasksSpeedyPC Registration3.job"

"d:windowsTasksSpeedyPC Update Version3 Startup Task.job"

"d:windowsTasksSpeedyPC Update Version3.job"

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

d:documents and settingsAll UsersApplication DataSpeedyPC Software

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareSpeedyPC Prodc_db.db

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareUUS3Master.xml

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareUUS3Patch.xml

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareUUS3SpeedyPCDatabase.xml

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareUUS3SpeedyPCMaster.xml

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareUUS3SpeedyPCPatch.xml

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareUUS3SpeedyPCUpdate.xml

d:documents and settingsAll UsersApplication DataSpeedyPC SoftwareUUS3Update.xml

d:documents and settingsAll UsersApplication DataTEMP

d:documents and settingsjjjjApplication DataDriverCure

d:documents and settingsjjjjApplication DataDriverCureLogFile.txt

d:documents and settingsjjjjApplication DataSpeedyPC Software

d:documents and settingsjjjjApplication DataYourFileDownloader

d:documents and settingsjjjjApplication DataYourFileDownloaderdht.dat

d:documents and settingsjjjjApplication DataYourFileDownloaderdownloads.ini

d:program filesCommon FilesSpeedyPC Software

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesad_generic.jpg

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesclose.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesclose_md.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesclose_mo.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesclose_pu.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesclose_pu_md.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesclose_pu_mo.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3ImagesLogo.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesmin.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesmin_md.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesmin_mo.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagesprogress_glow.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3Imagestopbar_gradient.png

d:program filesCommon FilesSpeedyPC SoftwareUUS3LiteUnzip.dll

d:program filesCommon FilesSpeedyPC SoftwareUUS3settings.xml

d:program filesCommon FilesSpeedyPC SoftwareUUS3SpeedyPC_Update3.exe

d:program filesCommon FilesSpeedyPC SoftwareUUS3UUS3.dll

d:program filesOpenApp

d:program filesOpenAppconf.ini

d:program filesOpenAppconfig.ini

d:program filesOpenAppstatus2.txt

d:program filesPerion

d:program filesPerionNewTabdata.txt

d:program filesPerionNewTabnewTab.crx

d:program filessmartdl

d:program filessmartdlcc

d:program filessmartdlgunzip.exe

d:program filessmartdlinstallid

d:program filessmartdlstatus

d:program filessmartdlTorrentSearch.exe

d:program filessmartdlvfd.exe

d:program filesSpeedyPC Software

d:program filesSpeedyPC SoftwareSpeedyPC7ZipDLL.dll

d:program filesSpeedyPC SoftwareSpeedyPCcolors.xml

d:program filesSpeedyPC SoftwareSpeedyPCCommonLoggingExtension.pxt

d:program filesSpeedyPC SoftwareSpeedyPCCommonSpecialist.pxt

d:program filesSpeedyPC SoftwareSpeedyPCExtensionManager.dll

d:program filesSpeedyPC SoftwareSpeedyPCfilecachedb.xml

d:program filesSpeedyPC SoftwareSpeedyPCHandleUpdate.dll

d:program filesSpeedyPC SoftwareSpeedyPCHTML0_days.htm

d:program filesSpeedyPC SoftwareSpeedyPCHTML1_days.htm

d:program filesSpeedyPC SoftwareSpeedyPCHTML15_days.htm

d:program filesSpeedyPC SoftwareSpeedyPCHTML2_days.htm

d:program filesSpeedyPC SoftwareSpeedyPCHTML30_days.htm

d:program filesSpeedyPC SoftwareSpeedyPCHTML5_days.htm

d:program filesSpeedyPC SoftwareSpeedyPCHTMLcontainer_content_bkimg.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLcontainer_content_leftimg.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLcontainer_content_rightimg.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLerror_connect.html

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimages10x10.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimages10x10tile.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagesbackground.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagescontentwrapper.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimageserror_internet.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagesfooterbarfill.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagesinfo_bubble.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagespcha_background.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagestile_footerbarbase.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagestile_subheadbarbase.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLimagestile_titlebarbase.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLmain.css

d:program filesSpeedyPC SoftwareSpeedyPCHTMLmain_error.css

d:program filesSpeedyPC SoftwareSpeedyPCHTMLpackage_titlebar_bkimg.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLuninstallbox_screen.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLuninstalldefault_button.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLuninstalldefault_button_over.gif

d:program filesSpeedyPC SoftwareSpeedyPCHTMLuninstallheader_background.jpg

d:program filesSpeedyPC SoftwareSpeedyPCHTMLuninstallindex.html

d:program filesSpeedyPC SoftwareSpeedyPCImagesAudiocancel.wav

d:program filesSpeedyPC SoftwareSpeedyPCImagesAudiocomplete.wav

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbtn.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbtn_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_bho.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_defrag.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_file.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_generalsettings.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_ignore.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_junk.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_privacy.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_process.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_registry.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_schedule.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsbutton_startup.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsregister.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsregister_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsregister_over_small.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsregister_small.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsrenew.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsrenew_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonssettings_button.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonssettings_button_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsstart.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesbuttonsstart_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesdefragc_empty.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesdefragc_frag.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesdefragc_unfrag.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesdefragc_unknown.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesdefragc_unmove.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramebottom_logo.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrameclose.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramedlg_title.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramelogo.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramemax.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramemin.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrameregister.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrameregister_close.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrameregister_close_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrameregister_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramerenew.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramerenew_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFramerestore.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrametab_bg.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrametabactive_bg.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrametabover_bg.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrametfn_bg.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrametfn_logo.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrametitle_bar.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrametop_logo.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesFrameupper_divider.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgeneralcollapse.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgeneraldelete.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgeneralexpand.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgeneralprogress_glow.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupbho.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupdup_audio.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupdup_doc.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupdup_image.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupdup_other.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupdup_video.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupig_drivers.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupig_proc.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupig_reg.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupjunk.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_3rd.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_browser.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_email.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_fs.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_im.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_multi.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_office.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_other.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgrouppriv_windows.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_apppath.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_com.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_dll.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_empty.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_extensions.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_filepath.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_font.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_help.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_shortcut.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_startup.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupreg_uninstall.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesgroupstartup.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_about.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_bho.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_clean.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_defrag.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_file.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_junk.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_junk_settings.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_malware.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_performance.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_privacy.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_process.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_registry.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_restore.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_settings.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_startup.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheadersheader_tools.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheaderssettings_general.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheaderssettings_ignore.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheaderssettings_privacy.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheaderssettings_registry.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesheaderssettings_schedule.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesIconsinfo.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesIconswarning.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistother.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistprocessbho.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistprocessprocess.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistprocessstartup.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_malware16.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_malware24.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_malware32.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_system16.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_system24.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_system32.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_unknown16.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_unknown24.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_unknown32.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_unwanted16.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_unwanted24.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_unwanted32.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_userapp16.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_userapp24.png

d:program filesSpeedyPC SoftwareSpeedyPCImageslistrecommendationsrec_userapp32.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation01.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation02.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation03.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation04.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation05.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation06.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation07.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation08.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScananimation09.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScancheck.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScandamage1.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScandamage2.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScandamage3.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScandamage4.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScandamage5.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScandamage6.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanerror.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanerror_large.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanFix.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanFix_over.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanjunk.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanmalware.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanmd5.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanprivacy.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanprocess-animation.gif

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_h.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_h_scan.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_l.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_l_scan.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_m.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_m_scan.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_mh.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_mh_scan.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_ml.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanrating_ml_scan.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanregistry.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScansecurity_high.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScansecurity_low.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesScanwarning.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesTabsoverview.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesTabsrestore.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesTabsscan.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesTabssettings.png

d:program filesSpeedyPC SoftwareSpeedyPCImagesTabstools.png

d:program filesSpeedyPC SoftwareSpeedyPCLiteUnzip.dll

d:program filesSpeedyPC SoftwareSpeedyPCLiteZip.dll

d:program filesSpeedyPC SoftwareSpeedyPCLogSettings.xml

d:program filesSpeedyPC SoftwareSpeedyPCmultipledetction.dat

d:program filesSpeedyPC SoftwareSpeedyPCMyResources.dll

d:program filesSpeedyPC SoftwareSpeedyPCprivacy.db

d:program filesSpeedyPC SoftwareSpeedyPCRegHookSpecialist.pxt

d:program filesSpeedyPC SoftwareSpeedyPCSandBoxer.dll

d:program filesSpeedyPC SoftwareSpeedyPCsettings.xml

d:program filesSpeedyPC SoftwareSpeedyPCSpeedyPC.exe

d:program filesSpeedyPC SoftwareSpeedyPCsqlite3.dll

d:program filesSpeedyPC SoftwareSpeedyPCtfn.xml

d:program filesSpeedyPC SoftwareSpeedyPCuninstall.exe

d:program filesSpeedyPC SoftwareSpeedyPCUNS.xml

d:program filesSpeedyPC SoftwareSpeedyPCUtility.pxt

d:program filesSpeedyPC SoftwareSpeedyPCwhitelist.dat

d:program filesTSearch

d:program filesTSearcheasydownload.exe

d:program filesTSearchresults

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------Legacy_ADOBEFLASHPLAYERUPDATESVC

-------Service_AdobeFlashPlayerUpdateSvc

.

((((((((((((((((((((((((( Files Created from 2012-08-09 to 2012-09-09 )))))))))))))))))))))))))))))))

.

2012-09-09 20:39 . 2012-09-09 20:39 -------- d-----w- d:windowssystem32Macromed

2012-09-08 23:06 . 2012-09-09 01:29 -------- d-----w- D:Prometheus.2012.R5.CAM-AUDiO.XViD-FANTA

2012-09-07 01:42 . 2012-09-07 02:51 751121163 ----a-w- D:swine_en.exe

2012-09-07 00:23 . 2012-09-09 01:25 -------- d-----w- D:The.Cabin.in.the.Woods.2011.BRRip.x264.AAC-LYCAN

2012-09-04 00:25 . 2004-08-03 20:10 274304 -c--a-w- d:windowssystem32dllcachebthport.sys

2012-09-04 00:25 . 2004-08-03 20:10 274304 ----a-w- d:windowssystem32driversbthport.sys

2012-09-04 00:25 . 2004-08-03 20:10 18944 -c--a-w- d:windowssystem32dllcachebthusb.sys

2012-09-04 00:25 . 2004-08-03 20:10 18944 ----a-w- d:windowssystem32driversBTHUSB.SYS

2012-09-04 00:25 . 2012-09-04 00:33 -------- d-----w- d:documents and settingsjjjjApplication DataBluetoothDriverInstaller

2012-09-03 15:36 . 2012-09-03 21:43 -------- d-----w- D:Kid vs Kat s02 ep01-08

2012-09-03 12:57 . 2012-09-03 12:57 -------- d-----w- d:documents and settingsjjjjLocal SettingsApplication DataIdentities

2012-09-02 02:15 . 2012-09-02 02:20 -------- d-----w- D:Bleach OST Collection

2012-08-31 22:34 . 2012-08-31 22:34 -------- d-----w- d:program filesIrfanView

2012-08-30 18:38 . 2012-09-01 16:50 -------- d-----w- D:From.Beyond.1986.UNRATED.DC.480p.HDRip.XviD.AC3-AsA

2012-08-29 15:17 . 2012-08-29 15:17 -------- d-s---w- d:windowsDownloaded Program Files

2012-08-27 00:35 . 2012-08-27 00:36 -------- d-----w- d:program filesDefcon

2012-08-26 21:12 . 2012-08-27 12:36 -------- d-----w- D:games

2012-08-26 20:24 . 2012-08-26 21:08 257291214 ----a-w- D:CS1.6 v44 FULL.exe

2012-08-23 12:55 . 2012-08-24 22:06 -------- d-----w- D:Starship.Troopers.Invasion.2012.BRRip.XviD.Ac3.Feel-Free

2012-08-18 10:52 . 2003-06-18 14:31 18944 ----a-w- d:windowssystem32Spoolprtprocsw32x86mdippr.dll

2012-08-18 10:52 . 2003-06-18 14:31 17920 ----a-w- d:windowssystem32mdimon.dll

2012-08-18 10:49 . 2012-08-18 10:49 -------- d-----w- d:program filesMicrosoft.NET

2012-08-18 10:49 . 2012-08-18 10:49 -------- d-----w- d:program filesMicrosoft ActiveSync

2012-08-18 10:48 . 2012-08-18 10:49 -------- d-----w- d:windowsSHELLNEW

2012-08-18 10:45 . 2012-08-18 10:45 -------- d-----r- D:MSOCache

2012-08-12 20:41 . 2012-09-09 14:12 -------- d-----w- d:windowssystem32wbemLogs

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-09 14:12 . 2012-08-09 19:45 823 ----a-w- d:documents and settingsjjjjApplication Datajjjjv1.18.0 - Trial version.vbs

2012-07-03 10:46 . 2012-08-08 22:32 22344 ----a-w- d:windowssystem32driversmbam.sys

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]

"NvMediaCenter"="d:windowssystem32NVMCTRAY.DLL" [2003-07-28 49152]

"uTorrent"="d:program filesuTorrentuTorrent.exe" [2012-08-07 1022352]

.

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]

"NvCplDaemon"="d:windowssystem32NvCpl.dll" [2003-07-28 4841472]

"nwiz"="nwiz.exe" [2003-07-28 323584]

"UnlockerAssistant"="d:program filesUnlockerUnlockerAssistant.exe" [2010-07-04 17408]

"SoundMan"="SOUNDMAN.EXE" [2003-04-24 54784]

"Malwarebytes' Anti-Malware"="d:program filesMalwarebytes' Anti-Malwarembamgui.exe" [2012-07-03 462920]

"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-03 110592]

.

d:documents and settingsAll UsersStart MenuProgramsStartup

FlexType 2K.lnk - d:windowsDatecsFlex2K.exe [2012-8-8 151552]

.

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

.

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]

"%windir%Network Diagnosticxpnetdiag.exe"=

"%windir%system32sessmgr.exe"=

"d:Program FilesuTorrentuTorrent.exe"=

"d:gamesCS1.6v44hl.exe"=

"d:Program FilesDefcondefcon.exe"=

"d:Program FilesSkypePhoneSkype.exe"=

.

R2 MBAMService;MBAMService;d:program filesMalwarebytes' Anti-Malwarembamservice.exe [8/9/2012 1:32 AM 655944]

R3 MBAMProtector;MBAMProtector;d:windowssystem32driversmbam.sys [8/9/2012 1:32 AM 22344]

.

Contents of the 'Scheduled Tasks' folder

.

2012-09-08 d:windowsTasksGoogleUpdateTaskUserS-1-5-21-220523388-789336058-1060284298-1003Core.job

- d:documents and settingsjjjjLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2012-08-12 10:05]

.

2012-09-09 d:windowsTasksGoogleUpdateTaskUserS-1-5-21-220523388-789336058-1060284298-1003UA.job

- d:documents and settingsjjjjLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2012-08-12 10:05]

.

------- Supplementary Scan -------

.

IE: E&xport to Microsoft Excel - d:progra~1MICROS~2OFFICE11EXCEL.EXE/3000

TCP: Interfaces{EA8F15FF-EB9E-45D6-8601-D211990F36E5}: NameServer = 46.233.0.3,46.233.0.4

.

- - - - ORPHANS REMOVED - - - -

.

AddRemove-{604CD5A1-4520-4844-B064-A3D884B77E91} - d:program filesSpeedyPC SoftwareSpeedyPCuninstall.exe

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2012-09-09 23:59

Windows 5.1.2600 Service Pack 2 NTFS

.

scanning hidden processes ...

.

scanning hidden autostart entries ...

.

scanning hidden files ...

.

d:windowssystem.ini 227 bytes

.

scan completed successfully

hidden files: 1

.

**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------

.

- - - - - - - > 'explorer.exe'(1488)

d:windowssystem32newdll.dll

d:windowssystem32wpdshserviceobj.dll

d:windowssystem32portabledevicetypes.dll

d:windowssystem32portabledeviceapi.dll

.

------------------------ Other Running Processes ------------------------

.

d:windowsSOUNDMAN.EXE

d:windowssystem32rundll32.exe

d:windowssystem32RUNDLL32.EXE

d:windowssystem32nvsvc32.exe

d:windowssystem32wscntfy.exe

.

**************************************************************************

.

Completion time: 2012-09-10 00:01:50 - machine was rebooted

ComboFix-quarantined-files.txt 2012-09-09 21:01

ComboFix2.txt 2012-09-09 19:44

.

Pre-Run: 247,320,289,280 bytes free

Post-Run: 247,301,222,400 bytes free

.

- - End Of File - - CFB1975691C395997CC2BFF265873C74

Не ти се струва то си е така

е ми не разбирам мн. от компютри ;ь

Редактирано 9 септември 201214 г. от gigir (преглед на промените)

9 септември 201214 г.

1.Къде е лога от AdwCleaner?

2.Стартирахте ли Adobe Flash Uninstaller?

3. Да опитаме един нов скрипт за всеки случай

Отворете notepad и с copy/paste въведете следната информация.

Folder::

D:\windows\system32\Macromed

D:\WINDOWS\system32\Flash

c:\windows\system32\mozilla

Registry::

[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{034PNT05-B5A0-M34M-R158-K33E54B0W1D5}]

[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{222BK3S5-32G5-27BS-X3FY-O278W15Y7S5Q}]

[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{568197CC-0EFF-2D7A-D52E-6B57F18D4F98}]

[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C74EE63C-0C2F-68F5-0938-A84D9F1EAC42}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0454C5-FD30-428E-8DB9-3FF87A612F64}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HKCU"=-

"Flasher"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HKLM"=-

"Flasher"=-

[HKEY_CURRENT_USER\software\microsoft\windows\Currentversion\policies\explorer\Run]

"Policies"=-

"FlashPlay"=-
Запазете файла с име CFScript и го провлачете и пуснете в Combofix (както е показано на картинката отдолу).
По време на сканиране от страна на ComboFix не стартирайте никакви други приложения, не натискайте клавиши от клавиатурата и не местете мишката !
Публикувайте лог файла, който ще се създаде след рестарта на компютъра в следващия си пост.

После пишете дали има подобрение.

10 септември 201214 г.

Автор

ComboFix 12-09-09.02 - jjjj 09/10/2012 15:11:03.3.1 - x86 Microsoft Windows XP Professional 5.1.2600.2.1251.1.1033.18.511.295 [GMT 3:00] Running from: d:documents and settingsjjjjDesktopComboFix.exe Command switches used :: d:documents and settingsjjjjDesktopCFScript.txt . . ((((((((((((((((((((((((( Files Created from 2012-08-10 to 2012-09-10 ))))))))))))))))))))))))))))))) . . 2012-09-09 20:39 . 2012-09-09 20:39 -------- d-----w- d:windowssystem32Macromed 2012-09-08 23:06 . 2012-09-09 01:29 -------- d-----w- D:Prometheus.2012.R5.CAM-AUDiO.XViD-FANTA 2012-09-07 01:42 . 2012-09-07 02:51 751121163 ----a-w- D:swine_en.exe 2012-09-07 00:23 . 2012-09-09 23:38 -------- d-----w- D:The.Cabin.in.the.Woods.2011.BRRip.x264.AAC-LYCAN 2012-09-04 00:25 . 2004-08-03 20:10 274304 -c--a-w- d:windowssystem32dllcachebthport.sys 2012-09-04 00:25 . 2004-08-03 20:10 274304 ----a-w- d:windowssystem32driversbthport.sys 2012-09-04 00:25 . 2004-08-03 20:10 18944 -c--a-w- d:windowssystem32dllcachebthusb.sys 2012-09-04 00:25 . 2004-08-03 20:10 18944 ----a-w- d:windowssystem32driversBTHUSB.SYS 2012-09-04 00:25 . 2012-09-04 00:33 -------- d-----w- d:documents and settingsjjjjApplication DataBluetoothDriverInstaller 2012-09-03 15:36 . 2012-09-03 21:43 -------- d-----w- D:Kid vs Kat s02 ep01-08 2012-09-03 12:57 . 2012-09-03 12:57 -------- d-----w- d:documents and settingsjjjjLocal SettingsApplication DataIdentities 2012-09-02 02:15 . 2012-09-02 02:20 -------- d-----w- D:Bleach OST Collection 2012-08-31 22:34 . 2012-08-31 22:34 -------- d-----w- d:program filesIrfanView 2012-08-30 18:38 . 2012-09-01 16:50 -------- d-----w- D:From.Beyond.1986.UNRATED.DC.480p.HDRip.XviD.AC3-AsA 2012-08-29 15:17 . 2012-08-29 15:17 -------- d-s---w- d:windowsDownloaded Program Files 2012-08-27 00:35 . 2012-08-27 00:36 -------- d-----w- d:program filesDefcon 2012-08-26 21:12 . 2012-08-27 12:36 -------- d-----w- D:games 2012-08-26 20:24 . 2012-08-26 21:08 257291214 ----a-w- D:CS1.6 v44 FULL.exe 2012-08-23 12:55 . 2012-08-24 22:06 -------- d-----w- D:Starship.Troopers.Invasion.2012.BRRip.XviD.Ac3.Feel-Free 2012-08-18 10:52 . 2003-06-18 14:31 18944 ----a-w- d:windowssystem32Spoolprtprocsw32x86mdippr.dll 2012-08-18 10:52 . 2003-06-18 14:31 17920 ----a-w- d:windowssystem32mdimon.dll 2012-08-18 10:49 . 2012-08-18 10:49 -------- d-----w- d:program filesMicrosoft.NET 2012-08-18 10:49 . 2012-08-18 10:49 -------- d-----w- d:program filesMicrosoft ActiveSync 2012-08-18 10:48 . 2012-08-18 10:49 -------- d-----w- d:windowsSHELLNEW 2012-08-18 10:45 . 2012-08-18 10:45 -------- d-----r- D:MSOCache 2012-08-12 20:41 . 2012-09-09 14:12 -------- d-----w- d:windowssystem32wbemLogs . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-09 14:12 . 2012-08-09 19:45 823 ----a-w- d:documents and settingsjjjjApplication Datajjjjv1.18.0 - Trial version.vbs 2012-07-03 10:46 . 2012-08-08 22:32 22344 ----a-w- d:windowssystem32driversmbam.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun] "NvMediaCenter"="d:windowssystem32NVMCTRAY.DLL" [2003-07-28 49152] "uTorrent"="d:program filesuTorrentuTorrent.exe" [2012-08-07 1022352] . [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] "NvCplDaemon"="d:windowssystem32NvCpl.dll" [2003-07-28 4841472] "nwiz"="nwiz.exe" [2003-07-28 323584] "UnlockerAssistant"="d:program filesUnlockerUnlockerAssistant.exe" [2010-07-04 17408] "SoundMan"="SOUNDMAN.EXE" [2003-04-24 54784] "Malwarebytes' Anti-Malware"="d:program filesMalwarebytes' Anti-Malwarembamgui.exe" [2012-07-03 462920] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-03 110592] . d:documents and settingsAll UsersStart MenuProgramsStartup FlexType 2K.lnk - d:windowsDatecsFlex2K.exe [2012-8-8 151552] . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem] "ConsentPromptBehaviorAdmin"= 0 (0x0) . [HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList] "%windir%Network Diagnosticxpnetdiag.exe"= "%windir%system32sessmgr.exe"= "d:Program FilesuTorrentuTorrent.exe"= "d:gamesCS1.6v44hl.exe"= "d:Program FilesDefcondefcon.exe"= "d:Program FilesSkypePhoneSkype.exe"= . R2 MBAMService;MBAMService;d:program filesMalwarebytes' Anti-Malwarembamservice.exe [8/9/2012 1:32 AM 655944] R3 MBAMProtector;MBAMProtector;d:windowssystem32driversmbam.sys [8/9/2012 1:32 AM 22344] . Contents of the 'Scheduled Tasks' folder . 2012-09-10 d:windowsTasksGoogleUpdateTaskUserS-1-5-21-220523388-789336058-1060284298-1003Core.job - d:documents and settingsjjjjLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2012-08-12 10:05] . 2012-09-10 d:windowsTasksGoogleUpdateTaskUserS-1-5-21-220523388-789336058-1060284298-1003UA.job - d:documents and settingsjjjjLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2012-08-12 10:05] . . ------- Supplementary Scan ------- . IE: E&xport to Microsoft Excel - d:progra~1MICROS~2OFFICE11EXCEL.EXE/3000 TCP: Interfaces{EA8F15FF-EB9E-45D6-8601-D211990F36E5}: NameServer = 46.233.0.3,46.233.0.4 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-09-10 15:26 Windows 5.1.2600 Service Pack 2 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'explorer.exe'(640) d:windowssystem32wpdshserviceobj.dll d:windowssystem32portabledevicetypes.dll d:windowssystem32portabledeviceapi.dll . Completion time: 2012-09-10 15:28:35 ComboFix-quarantined-files.txt 2012-09-10 12:28 ComboFix2.txt 2012-09-09 21:01 ComboFix3.txt 2012-09-09 19:44 . Pre-Run: 247,252,918,272 bytes free Post-Run: 247,253,614,592 bytes free . - - End Of File - - F570A8FA96B30E46B5ED149571B21E8F sorry 4e ne pi6a na kirilica nqmam bg ne6to a be az po princip bi trqbvalo da nqmam FLashPlayer no s Google Chrome moga da gledam vbox7/youtube a s Internet Explorer ne moga 1 koeto iskam tova da se opravi 4e seki p1t 1 s16to da pravq mi pisna ;X blagodarq naistina za pomo6ta

10 септември 201214 г.

Това ще го оправим...Google Chrome има вграден flash player и затова с него можете да гледате клипове. За останалите браузъри Adobe Flash Player трябва да се инсталира ръчно.

Преди да го оправим да изтрием една папка, че нещо не иска да се маха....

Аз пак питам, къде е лога от Adwcleaner и стартирахте ли Adobe Flash Uninstaller от преди няколко поста???

Изтеглете BlitzBlank от emsisoft и го запазете на вашия десктоп.
Стартирайте Blitzblank.exe.
Натиснете OK на предупредителното съобщение
Натиснете Script и с копи/пейст въведете следната информация.

DeleteFolder:
d:windowssystem32Macromed
Натиснете Execute Now. Компютъра ще се рестартира в опит за изтриване на файловете.
Когато процедурата завърши ще се създаде лог файл в D: => Публикувайте го в следващия си коментар.

Колкото до езика...явно се е бъгнал FlexType-a. Следвайте тази тема за да го премахнете...и да качите алтернативна фонетична подредба. Изисква се инсталационен диск за пълното премахване на FlexType!

http://forums.softvisia.com/index.php/topic/6641-nr-bg-fix-tool-%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D0%BD%D0%B0-%D1%82%D0%B5%D0%BC%D0%B0/

10 септември 201214 г.

Автор

Tova e ot Adwcleaner # AdwCleaner v2.001 - Logfile created 09/09/2012 at 23:34:13 # Updated 09/09/2012 by Xplode # Operating system : Microsoft Windows XP Service Pack 2 (32 bits) # User : jjjj - JJJ-A980BD39E94 # Boot Mode : Normal # Running from : D:Documents and SettingsjjjjDesktopadwcleaner.exe # Option [Delete] ***** [services] ***** ***** [Files / Folders] ***** Folder Deleted : D:Documents and SettingsAll UsersApplication DataBabylon Folder Deleted : D:Documents and SettingsjjjjApplication DataBabylon Folder Deleted : D:Documents and SettingsjjjjApplication DataBabylonToolbar Folder Deleted : D:Documents and SettingsjjjjLocal SettingsApplication DataConduit Folder Deleted : D:Program FilesConduit ***** [Registry] ***** Key Deleted : HKCUSoftwareAppDataLowSoftwareConduit Key Deleted : HKCUSoftwareBabylonToolbar Key Deleted : HKCUSoftwareConduit Key Deleted : HKCUSoftwareIM Key Deleted : HKCUSoftwareImInstaller Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{CFF4DB9B-135F-47C0-9269-B4C6572FD61A} Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtStats{32099AAC-C132-4136-9E9A-4E364A424E17} Key Deleted : HKLMSoftwareBabylon Key Deleted : HKLMSoftwareBabylonToolbar Key Deleted : HKLMSOFTWAREClassesAppID{608D3067-77E8-463D-9084-908966806826} Key Deleted : HKLMSoftwareConduit Key Deleted : HKLMSOFTWAREGoogleChromeExtensionsdhkplhfnhceodhffomolpfigojocbpcb Key Deleted : HKLMSOFTWAREGoogleChromeExtensionsdlnembnfbcpjnepmfjmngjenhhajpdfd Key Deleted : HKLMSOFTWAREGoogleChromeExtensionskincjchfokkeneeofpeefomkikfkiedl Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCache{83AA2913-C123-4146-85BD-AD8F93971D39} Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstall{83AA2913-C123-4146-85BD-AD8F93971D39} Key Deleted : HKLMSoftwareWeb Assistant Value Deleted : HKCUSoftwareMicrosoftInternet ExplorerToolbarWebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}] Value Deleted : HKLMSOFTWAREMozillaFirefoxextensions [{336D0C35-8A85-403a-B9D2-65C292C39087}] ***** [internet Browsers] ***** - Internet Explorer v7.0.5730.13 Restored : [HKCUSoftwareMicrosoftInternet ExplorerSearchScopes - DefaultScope] Restored : [HKUS-1-5-18SoftwareMicrosoftInternet ExplorerSearchScopes - DefaultScope] Restored : [HKUS-1-5-19SoftwareMicrosoftInternet ExplorerSearchScopes - DefaultScope] Restored : [HKUS-1-5-20SoftwareMicrosoftInternet ExplorerSearchScopes - DefaultScope] Replaced : [HKCUSoftwareMicrosoftInternet ExplorerMain - Start Page] = hxxp://mystart.incredibar.com/mb174?a=6OyN2Z64Qj&i=26 --> hxxp://www.google.com - Google Chrome v21.0.1180.89 File : D:Documents and SettingsjjjjLocal SettingsApplication DataGoogleChromeUser DataDefaultPreferences [OK] File is clean. ************************* AdwCleaner[s1].txt - [3171 octets] - [09/09/2012 23:34:13] ########## EOF - D:AdwCleaner[s1].txt - [3231 octets] ########## eto tova BlitzBlank 1.0.0.32 File/Registry Modification Engine native application MoveDirectoryOnReboot: sourceDirectory = "??d:windowssystem32macromed", destinationDirectory = "(null)", replaceWithDummy = 0 MoveDirectoryOnReboot: sourceDirectory = "??d:windowssystem32macromedFlash", destinationDirectory = "(null)", replaceWithDummy = 0 MoveFileOnReboot: sourceFile = "??d:windowssystem32macromedFlashFlashInstall.log", destinationFile = "(null)", replaceWithDummy = 0 Flex Type se v1rna da dobavq ;p

Редактирано 10 септември 201214 г. от gigir (преглед на промените)

11 септември 201214 г.

Щом FlexType се е върнал, защо продължавате да пишете на латиница?

Тук се пише на кирилица!

Сега има ли товарене на системата?

Изтеглете и инсталирайте Adobe Flash за Internet Explorer и Mozilla:

Adobe Flash Player 11.4.402.265 Final за (Internet Explorer)

Adobe Flash Player 11.4.402.265 Final за (Firefox, Safari, Opera)

Всички браузъри трябва да са затворени преди инсталацията.

Сега вече би трябвало да можете да гледате клипове не само с Chrome.

Има ли още проблеми или да се ориентираме към приключване?

11 септември 201214 г.

Автор

Трябва ли да ги инсталирам ако не искам Chrome. ми върши добра работа само него ползвам ?

а какво точно беше проблема ако може да попитам на по прост език ест. ?

11 септември 201214 г.

Съвсем се обърках...шом ползвате само Chrome, защо тогава искахте YouTube да работи и при Internet Explorer?

sorry 4e ne pi6a na kirilica nqmam bg ne6to
a be az po princip bi trqbvalo da nqmam FLashPlayer no s Google Chrome moga da gledam vbox7/youtube a s Internet Explorer ne moga 1 koeto iskam tova da se opravi 4e seki p1t 1 s16to da pravq mi pisna ;X
blagodarq naistina za pomo6ta

Аз разбрах, че искате и в IE да нямате проблеми с YouTube. Щом ползвате Chrome, няма нужда ка качвате Adobe Flash Player.

А иначе какъв бе проблема - ами приличаше на някакъв бацил, но файла ctfmon.exe макар, че стартираше от друго място (различно от оригиналното си местоположение) бе чист (макар и съмнителен).

Отделно имаше доста странни flash базирани процеса стартиращи с ОС.

Ако можете - архивирайте папката C:Qoobox и я качете тук и публикувайте линк за download в следващия си пост.

11 септември 201214 г.

Автор

http://file.bg/c184734XQZPz

Вече трябва да се оправило нали повече не трябва да ми се появява ?

Редактирано 11 септември 201214 г. от gigir (преглед на промените)

11 септември 201214 г.

Лол..доста бацили сме махнали:

https://www.virustotal.com/file/d6e0a4df4cd7398b11595abc88ebb787e8a3bc43a50d570e245f855a6cea64be/analysis/1347402836/

https://www.virustotal.com/file/012caba361df126f368877e032ee67c6bb03104e2dd13bccbd4ab5d2a3a55aa1/analysis/1347403161/

https://www.virustotal.com/file/062962d00b050e280c2dc3477ca611c1aad7d9d884ef4c2d8a887ffb03d44f00/analysis/1347403175/

https://www.virustotal.com/file/c7ff45cfed9db04eb85e283621e50e40dd53c4e2f60a512d62d038d307c2d73d/analysis/1347403195/

https://www.virustotal.com/file/96b3c2b8a716a9da408c9eaa0e27134f8a125f76560ba719251b45d70d07da31/analysis/1347403239/

https://www.virustotal.com/file/4944a7f2c9678005f0ccf6e42ead73b1ba3504961c179483b6f101d02b4cae62/analysis/1347403470/

Изтеглете Malwarebytes' Anti-Malware Free от тук
Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
Ако има намерени обновявания, тя ще ги изтегли и инсталира.
Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan.
Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

12 септември 201214 г.

Автор

Malwarebytes Anti-Malware я имам но само нямам cd-key имам 1 но тои вече е ползван и трябва всеки път да спирам интернета за да мога да ги махна ако може да ми дадеш cd-key ще се радвам много че се скъсах да търся google.bg но нищо

12 септември 201214 г.

Първо:

Правила на форума

2.10 Забранено е публикуването и разпространението на незаконен софтуер като кракове, пачове, серийни номера и произведения защитени с авторски права (филми, музика снимки и други), както и заявките за такива.

Второ, няма нужда да я активирате. Деинсталирайте наличната версия.

След това почистете с този инструмент и го стартирайте. Рестартирайте системата.

Следвайте инструкциите от предишния ми коментар. Инсталирайте само безплатната версия на скенера.

Ако ви попита за триален период изберете Decline. Обновете програмата и направете бърза проверка.

Изтрийте намерените наща и публикувайте лог файла!

12 септември 201214 г.

Автор

Malwarebytes Anti-Malware (PRO) 1.65.0.1400 www.malwarebytes.org Database version: v2012.09.07.13 Windows XP Service Pack 2 x86 NTFS Internet Explorer 7.0.5730.13 jjjj :: JJJ-A980BD39E94 [administrator] Protection: Enabled 9/13/2012 1:57:07 AM mbam-log-2012-09-13 (01-57-07).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 173111 Time elapsed: 5 minute(s), 6 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) А някаква добра анти вирусна програмка можеш ли да ми кажеш имам 2gh procesor 512ram 64mp video скоро 1 приятел ще ми даде 1гб ако може линк

13 септември 201214 г.

Да направим няколко финални проверки:

СТЪПКА 1

Моля изтеглете последната версия на TDSSKiller оттук и я запазете на вашия декстоп.

Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.
Сложете отметка през Loaded Modules.
Необходим е рестарт за осъществяване на промените. Направете го!
TDSSKiller ще стартира автоматично след рестарта. Важно е да се отбележи, че вашия компютър може да изглежда по-бавен, на моменти неизползваем и с по-ниска производителност. Това е нормално и ще трае само един рестарт. Дайте му достатъчно време да зареди приложенията стартиращи с Операционната Система във фонов режим.
След това натиснете Change parameters в TDSSKiller отново.
Сложете всички отметки (този път рестарт не се изисква).
Натиснете бутона Start Scan.
Проверката не би трябвало да отмене повече от 2 minutes.
Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.
Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.
Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.
Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

СТЪПКА 2

Изтеглете OTL.exe и го запазете на десктопа.

Стартирайте OTL (ако е необходимо, потвърдете през UAC).
Направете следните настройки:
Сложете отметка пред Scan All Users
Под менюто File Age изберете 90 days
Под менюто Standard Registry променете на ALL
Сложете отметки пред LOP и Purity Check

Под

с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%*.*
%USERPROFILE%*.*
%USERPROFILE%Application Data*.*
%USERPROFILE%Application Data*.
%USERPROFILE%Local Settings*.*
%USERPROFILE%Local Settingstemp*.exe
%USERPROFILE%Local SettingsTemporary Internet Files*.exe
%USERPROFILE%Local SettingsApplication Data*.*
%AllUsersProfile%*.*
%AllUsersProfile%Application Data*.*
%AllUsersProfile%Application Data*.
%AllUsersProfile%Application DataLocal Settings*.*
%AllUsersProfile%Application DataLocal SettingsTemp*.exe
%ALLUSERSPROFILE%DocumentsMy Music*.exe
%ALLUSERSPROFILE%DocumentsMy Pictures*.exe
%ALLUSERSPROFILE%DocumentsMy Videos*.exe
%ALLUSERSPROFILE%Documents*.exe
%USERPROFILE%My Documents*.*
%CommonProgramFiles%*.*
%CommonProgramFiles%ComObjects*.*
%PROGRAMFILES%*.*
%PROGRAMFILES%*.
%systemroot%system32configsystemprofile*.*
%systemroot%system32configsystemprofileApplication Data*.*
%systemroot%system32configsystemprofileLocal Settings*.*
%systemroot%system32configsystemprofileLocal SettingsApplication Data*.*
%systemroot%system32configsystemprofileLocal SettingsTemp*.exe
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files*.exe
C:Documents and SettingsLocalServiceApplication Data*.*
C:Documents and SettingsLocalServiceLocal SettingsApplication Data*.*
C:Documents and SettingsLocalServiceLocal Settingstemp*.exe
C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet Files*.exe
C:Documents and SettingsLocalServiceLocal Settings*.*
C:Documents and SettingsLocalService*.*
C:Documents and SettingsNetworkServiceApplication Data*.*
C:Documents and SettingsNetworkServiceLocal SettingsApplication Data*.*
C:Documents and SettingsNetworkServiceLocal Settingstemp*.exe
C:Documents and SettingsNetworkServiceLocal SettingsTemporary Internet Files*.exe
C:Documents and SettingsNetworkServiceLocal Settings*.*
C:Documents and SettingsNetworkService*.*
%windir%temp*.exe
%windir%minidump*.*
%windir%*.
%windir%installer*.
%windir%system32*.
%Temp%smtmp1*.*
%Temp%smtmp2*.*
%Temp%smtmp3*.*
%Temp%smtmp4*.*
%systemroot%system32*.dll /lockedfiles
%systemroot%Tasks*.job /lockedfiles
%systemroot%system32drivers*.sys /90
%systemroot%system32drivers*.sys /lockedfiles
%systemroot%system32Spoolprtprocsw32x86*.dll
%systemroot%*. /rp /s
%systemroot%assemblytmp*.* /S /MD5
%systemroot%assemblytemp*.* /S /MD5
%systemroot%assemblyGAC*.ini
%systemroot%assemblyGAC_32*.ini
%SystemRoot%assemblyGAC_MSIL*.ini
HKEY_CLASSES_ROOTCLSID{7C857801-7381-11CF-884D-00AA004B2E24} /s
HKEY_CLASSES_ROOTCLSID{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s
HKEY_CURRENT_USERSoftwareClassesCLSID{42aedc87-2188-41fd-b9a3-0c966feabec1} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{42aedc87-2188-41fd-b9a3-0c966feabec1} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{7C857801-7381-11CF-884D-00AA004B2E24} /s
HKEY_CLASSES_ROOTclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s
HKEY_CLASSES_ROOTclsid{fbeb8a05-beee-4442-804e-409d6c4515e9} /s
HKEY_CURRENT_USERSoftwareClassesclsid{fbeb8a05-beee-4442-804e-409d6c4515e9} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s
HKEY_CURRENT_USERSoftwareMSOLoad /s
c:system volume information|_REGISTRY_MACHINE_SYSTEM;true;true;true /FP
c:system volume information|_REGISTRY_MACHINE_SOFTWARE;true;true;true /FP
restorepoints
type c:boot.ini >> test.txt /c
type C:Windowsntbtlog.txt >> text.txt /c
>C:commands.txt echo list vol /raw /hide /c
/wait
>C:DiskReport.txt diskpart /s C:commands.txt /raw /hide /c
/wait
type c:diskreport.txt /c
/wait
erase c:commands.txt /hide /c
/wait
erase c:diskreport.txt /hide /c
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
consrv.dll
services.exe
svchost.exe
explorer.exe
userinit.exe
winlogon.exe
smss.exe
lsass.exe
atapi.sys
iaStor.sys
serial.sys
disk.sys
volsnap.sys
redbook.sys
i8042prt.sys
afd.sys
netbt.sys
tcpip.sys
ipsec.sys
hlp.dat
str.sys
crexv.ocx
/md5stop

Натиснете маркираният в синьо бутон: Run Scan.
Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията Прикачени файлове, когато публикувате мнение).

13 септември 201214 г.

Автор

00:01:49.0908 2268 TDSS rootkit removing tool 2.8.8.0 00:01:50.0168 2268 =========================================== 00:01:50.0168 2268 Current date / time: 2012/09/14 00:01:50.01 00:01:50.0168 2268 SystemInfo: 00:01:50.0168 2268 00:01:50.0168 2268 OS Version: 5.1.2600 ServicePack: 2.0 00:01:50.0168 2268 Product type: Workstation 00:01:50.0168 2268 ComputerName: JJJ-A980BD39E94 00:01:50.0168 2268 UserName: jjjj 00:01:50.0168 2268 Windows directory: D:WINDOWS 00:01:50.0168 2268 System windows directory: D:WINDOWS 00:01:50.0168 2268 Processor architecture: Intel x86 00:01:50.0168 2268 Number of processors: 1 00:01:50.0168 2268 Page size: 0x1000 00:01:50.0168 2268 Boot type: Normal boot 00:01:50.0168 2268 =========================================== 00:01:52.0121 2268 Drive DeviceHarddisk0DR0 - Size: 0x4A85D56000 00:01:52.0141 2268 =========================================== 00:01:52.0141 2268 DeviceHarddisk0DR0: 00:01:52.0141 2268 MBR partitions: 00:01:52.0141 2268 DeviceHarddisk0DR0Partition1: MBR, 00:01:52.0151 2268 DeviceHarddisk0DR0Partition2: MBR, 00:01:52.0151 2268 =========================================== 00:01:52.0191 2268 C: <-> DeviceHarddisk0DR0Partition1 00:01:52.0221 2268 D: <-> DeviceHarddisk0DR0Partition2 00:01:52.0221 2268 =========================================== 00:01:52.0221 2268 Initialize success 00:01:52.0221 2268 =========================================== 00:01:54.0424 2400 =========================================== 00:01:54.0424 2400 Scan started 00:01:54.0424 2400 Mode: Manual; 00:01:54.0424 2400 =========================================== 00:01:55.0656 2400 ================ Scan system memory 00:01:55.0666 2400 System memory - ok 00:01:55.0666 2400 ================ Scan services ============ 00:01:55.0766 2400 Abiosdsk - ok 00:01:55.0786 2400 abp480n5 - ok 00:01:55.0856 2400 [ A10C7534F7223F4A73A948967D00E69B ] ACPI 00:01:55.0876 2400 ACPI - ok 00:01:55.0916 2400 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC 00:01:55.0926 2400 ACPIEC - ok 00:01:55.0947 2400 adpu160m - ok 00:01:55.0987 2400 [ 1EE7B434BA961EF845DE136224C30FEC ] aec 00:01:56.0007 2400 aec - ok 00:01:56.0067 2400 [ 5AC495F4CB807B2B98AD2AD591E6D92E ] AFD 00:01:56.0087 2400 AFD - ok 00:01:56.0127 2400 [ 2C428FA0C3E3A01ED93C9B2A27D8D4BB ] agp440 00:01:56.0137 2400 agp440 - ok 00:01:56.0147 2400 Aha154x - ok 00:01:56.0187 2400 aic78u2 - ok 00:01:56.0197 2400 aic78xx - ok 00:01:56.0307 2400 [ E34E007C52CEA00B8FFAABF15AE1EFF9 ] ALCXWDM 00:01:56.0367 2400 ALCXWDM - ok 00:01:56.0417 2400 [ C7AE0FD3867DB0D42B03B73C18F3D671 ] Alerter 00:01:56.0427 2400 Alerter - ok 00:01:56.0467 2400 [ F1958FBF86D5C004CF19A5951A9514B7 ] ALG 00:01:56.0477 2400 ALG - ok 00:01:56.0487 2400 AliIde - ok 00:01:56.0507 2400 amsint - ok 00:01:56.0557 2400 [ 9C3C12975C97119412802B181FBEEFFE ] AppMgmt 00:01:56.0577 2400 AppMgmt - ok 00:01:56.0597 2400 asc - ok 00:01:56.0617 2400 asc3350p - ok 00:01:56.0638 2400 asc3550 - ok 00:01:56.0838 2400 [ 02000ABF34AF4C218C35D257024807D6 ] AsyncMac 00:01:56.0848 2400 AsyncMac - ok 00:01:56.0888 2400 [ CDFE4411A69C224BD1D11B2DA92DAC51 ] atapi 00:01:56.0888 2400 atapi - ok 00:01:56.0908 2400 Atdisk - ok 00:01:56.0928 2400 [ EC88DA854AB7D7752EC8BE11A741BB7F ] Atmarpc 00:01:56.0938 2400 Atmarpc - ok 00:01:56.0958 2400 [ DB66DB626E4882EBEF55F136F12C1829 ] AudioSrv 00:01:56.0968 2400 AudioSrv - ok 00:01:57.0028 2400 [ D9F724AA26C010A217C97606B160ED68 ] audstub 00:01:57.0028 2400 audstub - ok 00:01:57.0098 2400 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep 00:01:57.0098 2400 Beep - ok 00:01:57.0178 2400 [ 17A0D43C80DB5348759C649835A78CFC ] BITS 00:01:57.0218 2400 BITS - ok 00:01:57.0268 2400 [ 39128B5A743545BAEDD3984C210F00A8 ] Browser 00:01:57.0278 2400 Browser - ok 00:01:57.0359 2400 [ 30B76EC553B202890E90A93A4E1A27B5 ] BTHPORT 00:01:57.0389 2400 BTHPORT - ok 00:01:57.0439 2400 [ A18CC8C9B3890B1B68BED213716FEF6B ] BthServ 00:01:57.0449 2400 BthServ - ok 00:01:57.0479 2400 [ F06D4CB9918B462A84D9AC00027EFC30 ] BTHUSB 00:01:57.0489 2400 BTHUSB - ok 00:01:57.0499 2400 catchme - ok 00:01:57.0539 2400 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k 00:01:57.0559 2400 cbidf2k - ok 00:01:57.0569 2400 cd20xrnt - ok 00:01:57.0629 2400 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio 00:01:57.0639 2400 Cdaudio - ok 00:01:57.0699 2400 [ CD7D5152DF32B47F4E36F710B35AAE02 ] Cdfs 00:01:57.0709 2400 Cdfs - ok 00:01:57.0779 2400 [ 7B53584D94E9D8716B2DE91D5F1CB42D ] Cdrom 00:01:57.0789 2400 Cdrom - ok 00:01:57.0799 2400 Changer - ok 00:01:57.0839 2400 [ 3192BD04D032A9C4A85A3278C268A13A ] CiSvc 00:01:57.0849 2400 CiSvc - ok 00:01:57.0869 2400 [ C8DEC22C4137D7A90F8BDF41CA4B82AE ] ClipSrv 00:01:57.0869 2400 ClipSrv - ok 00:01:57.0889 2400 CmdIde - ok 00:01:57.0909 2400 COMSysApp - ok 00:01:57.0939 2400 Cpqarray - ok 00:01:57.0989 2400 [ 87F3E2D2A3231F820F9248DB90090F42 ] CryptSvc 00:01:57.0989 2400 CryptSvc - ok 00:01:58.0009 2400 dac2w2k - ok 00:01:58.0030 2400 dac960nt - ok 00:01:58.0090 2400 [ 348F04E3582EF2467EE5379D67B99FD7 ] DcomLaunch 00:01:58.0120 2400 DcomLaunch - ok 00:01:58.0150 2400 [ 3F15A1DBD86F7BDAF404648282D11ECE ] Dhcp 00:01:58.0160 2400 Dhcp - ok 00:01:58.0190 2400 [ 00CA44E4534865F8A3B64F7C0984BFF0 ] Disk 00:01:58.0190 2400 Disk - ok 00:01:58.0210 2400 dmadmin - ok 00:01:58.0310 2400 [ C0FBB516E06E243F0CF31F597E7EBF7D ] dmboot 00:01:58.0390 2400 dmboot - ok 00:01:58.0440 2400 [ F5E7B358A732D09F4BCF2824B88B9E28 ] dmio 00:01:58.0460 2400 dmio - ok 00:01:58.0480 2400 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload 00:01:58.0480 2400 dmload - ok 00:01:58.0500 2400 [ 1639D9964C9E1B2ECCA95C8217D3E70D ] dmserver 00:01:58.0510 2400 dmserver - ok 00:01:58.0540 2400 [ A6F881284AC1150E37D9AE47FF601267 ] DMusic 00:01:58.0550 2400 DMusic - ok 00:01:58.0570 2400 [ 7379DE06FD196E396A00AA97B990C00D ] Dnscache 00:01:58.0580 2400 Dnscache - ok 00:01:58.0600 2400 dpti2o - ok 00:01:58.0620 2400 [ 1ED4DBBAE9F5D558DBBA4CC450E3EB2E ] drmkaud 00:01:58.0630 2400 drmkaud - ok 00:01:58.0660 2400 [ 67DFF7BBBD0E80AAB7B3CF061448DB8A ] ERSvc 00:01:58.0660 2400 ERSvc - ok 00:01:58.0690 2400 [ C6CE6EEC82F187615D1002BB3BB50ED4 ] Eventlog 00:01:58.0710 2400 Eventlog - ok 00:01:58.0751 2400 [ 3D9418CF112A11ADC45E2A0C0A44DF47 ] EventSystem 00:01:58.0771 2400 EventSystem - ok 00:01:58.0801 2400 [ 3117F595E9615E04F05A54FC15A03B20 ] Fastfat 00:01:58.0811 2400 Fastfat - ok 00:01:58.0851 2400 [ 53D9184A21C5CBF600D918E51EF3A7E5 00:01:58.0861 2400 FastUserSwitchingCompatibility - ok 00:01:58.0931 2400 [ CED2E8396A8838E59D8FD529C680E02C ] Fdc 00:01:58.0931 2400 Fdc - ok 00:01:58.0951 2400 [ E153AB8A11DE5452BCF5AC7652DBF3ED ] Fips 00:01:58.0961 2400 Fips - ok 00:01:58.0991 2400 [ 0DD1DE43115B93F4D85E889D7A86F548 ] Flpydisk 00:01:58.0991 2400 Flpydisk - ok 00:01:59.0051 2400 [ 6CC5181F718820861EEADAE38F764B75 ] FltMgr 00:01:59.0061 2400 FltMgr - ok 00:01:59.0081 2400 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec 00:01:59.0081 2400 Fs_Rec - ok 00:01:59.0111 2400 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk 00:01:59.0121 2400 Ftdisk - ok 00:01:59.0151 2400 [ C0F1D4A21DE5A415DF8170616703DEBF ] Gpc 00:01:59.0151 2400 Gpc - ok 00:01:59.0221 2400 [ 8827911A8C37E40C027CBFC88E69D967 ] helpsvc 00:01:59.0231 2400 helpsvc - ok 00:01:59.0241 2400 HidServ - ok 00:01:59.0261 2400 [ 1DE6783B918F540149AA69943BDFEBA8 ] hidusb 00:01:59.0261 2400 hidusb - ok 00:01:59.0281 2400 hpn - ok 00:01:59.0371 2400 [ CA9A02A72CC7CBDA40AFB457AEA77D2E ] HTTP 00:01:59.0391 2400 HTTP - ok 00:01:59.0442 2400 [ 064D8581ADF77C25133E7D751D917D83 ] HTTPFilter 00:01:59.0462 2400 HTTPFilter - ok 00:01:59.0482 2400 i2omgmt - ok 00:01:59.0492 2400 i2omp - ok 00:01:59.0562 2400 [ 5502B58EEF7486EE6F93F3F164DCB808 ] i8042prt 00:01:59.0572 2400 i8042prt - ok 00:01:59.0642 2400 [ 12C59B8929121ACE2F55ACC86682CF12 ] Imapi 00:01:59.0652 2400 Imapi - ok 00:01:59.0722 2400 [ FA788520BCAC0F5D9D5CDE5615C0D931 ] ImapiService 00:01:59.0732 2400 ImapiService - ok 00:01:59.0752 2400 ini910u - ok 00:01:59.0792 2400 [ 2D722B2B54AB55B2FA475EB58D7B2AAD ] IntelIde 00:01:59.0802 2400 IntelIde - ok 00:01:59.0862 2400 [ BF736DB0517D2B5EFAECF3A7D2C65228 ] intelppm 00:01:59.0862 2400 intelppm - ok 00:01:59.0902 2400 [ 4448006B6BC60E6C027932CFC38D6855 ] Ip6Fw 00:01:59.0912 2400 Ip6Fw - ok 00:01:59.0962 2400 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver 00:01:59.0962 2400 IpFilterDriver - ok 00:01:59.0982 2400 [ E1EC7F5DA720B640CD8FB8424F1B14BB ] IpInIp 00:01:59.0982 2400 IpInIp - ok 00:02:00.0012 2400 [ 472C75F85E631F8AA87D21C9FEE6238D ] IpNat 00:02:00.0032 2400 IpNat - ok 00:02:00.0062 2400 [ 64537AA5C003A6AFEEE1DF819062D0D1 ] IPSec 00:02:00.0062 2400 IPSec - ok 00:02:00.0113 2400 [ 50708DAA1B1CBB7D6AC1CF8F56A24410 ] IRENUM 00:02:00.0113 2400 IRENUM - ok 00:02:00.0153 2400 [ E504F706CCB699C2596E9A3DA1596E87 ] isapnp 00:02:00.0153 2400 isapnp - ok 00:02:00.0203 2400 [ EBDEE8A2EE5393890A1ACEE971C4C246 ] Kbdclass 00:02:00.0213 2400 Kbdclass - ok 00:02:00.0253 2400 [ 8531438246CE9474E41EE1599904C0C7 ] kmixer 00:02:00.0273 2400 kmixer - ok 00:02:00.0293 2400 [ EB7FFE87FD367EA8FCA0506F74A87FBB ] KSecDD 00:02:00.0303 2400 KSecDD - ok 00:02:00.0343 2400 [ 76B15AC51A74BE936EA86EA6E08817CF ] lanmanserver 00:02:00.0353 2400 lanmanserver - ok 00:02:00.0383 2400 [ 2299B1933CD9207630A00676E390F32F 00:02:00.0403 2400 lanmanworkstation - ok 00:02:00.0423 2400 lbrtfdc - ok 00:02:00.0473 2400 [ B3EFF6D938C572E90A07B3D87A3C7657 ] LmHosts 00:02:00.0483 2400 LmHosts - ok 00:02:00.0533 2400 [ 65E794E86468B61F2BC79ABC48BC4433 ] MBAMProtector 00:02:00.0543 2400 MBAMProtector - ok 00:02:00.0723 2400 [ 0DCF16B1449811EFA47AB52CAC84093C ] MBAMScheduler 00:02:00.0763 2400 MBAMScheduler - ok 00:02:00.0834 2400 [ 9EAABA4D601004BEA4DAA6E146E19A96 ] MBAMService 00:02:00.0884 2400 MBAMService - ok 00:02:00.0924 2400 [ 95FD808E4AC22ABA025A7B3EAC0375D2 ] Messenger 00:02:00.0924 2400 Messenger - ok 00:02:00.0974 2400 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd 00:02:00.0984 2400 mnmdd - ok 00:02:01.0014 2400 [ F6415361201915B9FE3896B0E4E724FF ] mnmsrvc 00:02:01.0024 2400 mnmsrvc - ok 00:02:01.0054 2400 [ 6FC6F9D7ACC36DCA9B914565A3AEDA05 ] Modem 00:02:01.0054 2400 Modem - ok 00:02:01.0104 2400 [ 34E1F0031153E491910E12551400192C ] Mouclass 00:02:01.0104 2400 Mouclass - ok 00:02:01.0134 2400 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid 00:02:01.0144 2400 mouhid - ok 00:02:01.0164 2400 [ 65653F3B4477F3C63E68A9659F85EE2E ] MountMgr 00:02:01.0174 2400 MountMgr - ok 00:02:01.0184 2400 mraid35x - ok 00:02:01.0224 2400 [ 9921D9DF98F266560EC28B3BDB580180 ] MRxDAV 00:02:01.0244 2400 MRxDAV - ok 00:02:01.0334 2400 [ 321FE492903D8A07F79B7099D71FF578 ] MRxSmb 00:02:01.0374 2400 MRxSmb - ok 00:02:01.0424 2400 [ C7C3D89EB0A6F3DBA622EA737FA335B1 ] MSDTC 00:02:01.0424 2400 MSDTC - ok 00:02:01.0454 2400 [ 561B3A4333CA2DBDBA28B5B956822519 ] Msfs 00:02:01.0454 2400 Msfs - ok 00:02:01.0464 2400 MSIServer - ok 00:02:01.0515 2400 [ AE431A8DD3C1D0D0610CDBAC16057AD0 ] MSKSSRV 00:02:01.0515 2400 MSKSSRV - ok 00:02:01.0535 2400 [ 13E75FEF9DFEB08EEDED9D0246E1F448 ] MSPCLOCK 00:02:01.0545 2400 MSPCLOCK - ok 00:02:01.0555 2400 [ 1988A33FF19242576C3D0EF9CE785DA7 ] MSPQM 00:02:01.0555 2400 MSPQM - ok 00:02:01.0595 2400 [ 469541F8BFD2B32659D5D463A6714BCE ] mssmbios 00:02:01.0615 2400 mssmbios - ok 00:02:01.0645 2400 [ A1DD45CDCD2BF8C57A9A0493C09B00B3 ] Mup 00:02:01.0655 2400 Mup - ok 00:02:01.0685 2400 [ 558635D3AF1C7546D26067D5D9B6959E ] NDIS 00:02:01.0695 2400 NDIS - ok 00:02:01.0745 2400 [ 08D43BBDACDF23F34D79E44ED35C1B4C ] NdisTapi 00:02:01.0755 2400 NdisTapi - ok 00:02:01.0785 2400 [ 77D9BF86B912104C229D4F0D25BE3C12 ] Ndisuio 00:02:01.0785 2400 Ndisuio - ok 00:02:01.0815 2400 [ 0B90E255A9490166AB368CD55A529893 ] NdisWan 00:02:01.0825 2400 NdisWan - ok 00:02:01.0835 2400 [ 59FC3FB44D2669BC144FD87826BB571F ] NDProxy 00:02:01.0845 2400 NDProxy - ok 00:02:01.0865 2400 [ 3A2ACA8FC1D7786902CA434998D7CEB4 ] NetBIOS 00:02:01.0865 2400 NetBIOS - ok 00:02:01.0895 2400 [ 0C80E410CD2F47134407EE7DD19CC86B ] NetBT 00:02:01.0905 2400 NetBT - ok 00:02:01.0955 2400 [ 05AFB5AD06462257BEA7495283C86D50 ] NetDDE 00:02:01.0965 2400 NetDDE - ok 00:02:01.0995 2400 [ 05AFB5AD06462257BEA7495283C86D50 ] NetDDEdsdm 00:02:01.0995 2400 NetDDEdsdm - ok 00:02:02.0055 2400 [ 84885F9B82F4D55C6146EBF6065D75D2 ] Netlogon 00:02:02.0055 2400 Netlogon - ok 00:02:02.0095 2400 [ 3516D8A18B36784B1005B950B84232E1 ] Netman 00:02:02.0105 2400 Netman - ok 00:02:02.0155 2400 [ 4E74AF063C3271FBEA20DD940CFD1184 ] Nla 00:02:02.0175 2400 Nla - ok 00:02:02.0185 2400 [ 4F601BCB8F64EA3AC0994F98FED03F8E ] Npfs 00:02:02.0185 2400 Npfs - ok 00:02:02.0286 2400 [ 52723E766051AC8F0B70491AD91F0079 ] Ntfs 00:02:02.0336 2400 Ntfs - ok 00:02:02.0356 2400 [ 84885F9B82F4D55C6146EBF6065D75D2 ] NtLmSsp 00:02:02.0356 2400 NtLmSsp - ok 00:02:02.0436 2400 [ B62F29C00AC55A761B2E45877D85EA0F ] NtmsSvc 00:02:02.0476 2400 NtmsSvc - ok 00:02:02.0516 2400 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null 00:02:02.0516 2400 Null - ok 00:02:02.0726 2400 [ 1685A86CE8DC5A70D307DCA625FB50E7 ] nv 00:02:02.0826 2400 nv - ok 00:02:02.0856 2400 [ 697A09635E30D3722E1124EC33FACE15 ] NVSvc 00:02:02.0866 2400 NVSvc - ok 00:02:02.0917 2400 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt 00:02:02.0917 2400 NwlnkFlt - ok 00:02:02.0937 2400 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd 00:02:02.0937 2400 NwlnkFwd - ok 00:02:03.0037 2400 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose 00:02:03.0047 2400 ose - ok 00:02:03.0087 2400 [ 29744EB4CE659DFE3B4122DEB45BC478 ] Parport 00:02:03.0097 2400 Parport - ok 00:02:03.0117 2400 [ 1628710C352BD79ABEBA234356E2B586 ] PartMgr 00:02:03.0117 2400 PartMgr - ok 00:02:03.0187 2400 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm 00:02:03.0187 2400 ParVdm - ok 00:02:03.0207 2400 [ 8086D9979234B603AD5BC2F5D890B234 ] PCI 00:02:03.0217 2400 PCI - ok 00:02:03.0237 2400 PCIDump - ok 00:02:03.0267 2400 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde 00:02:03.0267 2400 PCIIde - ok 00:02:03.0317 2400 [ 82A087207DECEC8456FBE8537947D579 ] Pcmcia 00:02:03.0347 2400 Pcmcia - ok 00:02:03.0357 2400 PDCOMP - ok 00:02:03.0367 2400 PDFRAME - ok 00:02:03.0387 2400 PDRELI - ok 00:02:03.0397 2400 PDRFRAME - ok 00:02:03.0417 2400 perc2 - ok 00:02:03.0437 2400 perc2hib - ok 00:02:03.0507 2400 [ C6CE6EEC82F187615D1002BB3BB50ED4 ] PlugPlay 00:02:03.0507 2400 PlugPlay - ok 00:02:03.0527 2400 [ 84885F9B82F4D55C6146EBF6065D75D2 ] PolicyAgent 00:02:03.0527 2400 PolicyAgent - ok 00:02:03.0547 2400 [ 1C5CC65AAC0783C344F16353E60B72AC ] PptpMiniport 00:02:03.0557 2400 PptpMiniport - ok 00:02:03.0577 2400 [ 84885F9B82F4D55C6146EBF6065D75D2 00:02:03.0577 2400 ProtectedStorage - ok 00:02:03.0618 2400 [ 48671F327553DCF1D27F6197F622A668 ] PSched 00:02:03.0628 2400 PSched - ok 00:02:03.0638 2400 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink 00:02:03.0648 2400 Ptilink - ok 00:02:03.0668 2400 [ 153D02480A0A2F45785522E814C634B6 ] PxHelp20 00:02:03.0668 2400 PxHelp20 - ok 00:02:03.0688 2400 ql1080 - ok 00:02:03.0698 2400 Ql10wnt - ok 00:02:03.0718 2400 ql12160 - ok 00:02:03.0728 2400 ql1240 - ok 00:02:03.0748 2400 ql1280 - ok 00:02:03.0778 2400 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd 00:02:03.0788 2400 RasAcd - ok 00:02:03.0828 2400 [ 44DB7A9BDD2FB58747D123FBF1D35ADB ] RasAuto 00:02:03.0838 2400 RasAuto - ok 00:02:03.0878 2400 [ 98FAEB4A4DCF812BA1C6FCA4AA3E115C ] Rasl2tp 00:02:03.0888 2400 Rasl2tp - ok 00:02:03.0928 2400 [ ED5E89DEDB0111E2869CB37D62B46C7A ] RasMan 00:02:03.0948 2400 RasMan - ok 00:02:03.0968 2400 [ 7306EEED8895454CBED4669BE9F79FAA ] RasPppoe 00:02:03.0968 2400 RasPppoe - ok 00:02:03.0988 2400 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti 00:02:03.0988 2400 Raspti - ok 00:02:04.0028 2400 [ B48441A6DC703EE4C36DB14EE51A189C ] Rdbss 00:02:04.0048 2400 Rdbss - ok 00:02:04.0058 2400 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD 00:02:04.0058 2400 RDPCDD - ok 00:02:04.0108 2400 [ A2CAE2C60BC37E0751EF9DDA7CEAF4AD ] rdpdr 00:02:04.0128 2400 rdpdr - ok 00:02:04.0198 2400 [ 047BEA21274C8A4A233674A76C958C2C ] RDPWD 00:02:04.0208 2400 RDPWD - ok 00:02:04.0258 2400 [ 729798E0933076B8FCFCD9934698F164 ] RDSessMgr 00:02:04.0268 2400 RDSessMgr - ok 00:02:04.0309 2400 [ B31B4588E4086D8D84ADBF9845C2402B ] redbook 00:02:04.0309 2400 redbook - ok 00:02:04.0369 2400 [ 3046DB917E3CFA040632799DD9B14865 ] RemoteAccess 00:02:04.0379 2400 RemoteAccess - ok 00:02:04.0429 2400 [ 3151427DB7D87107D1C5BE58FAC53960 ] RemoteRegistry 00:02:04.0429 2400 RemoteRegistry - ok 00:02:04.0499 2400 [ 793F04A09B15E7C6C11DBDFFAF06C0AB ] RpcLocator 00:02:04.0509 2400 RpcLocator - ok 00:02:04.0559 2400 [ 348F04E3582EF2467EE5379D67B99FD7 ] RpcSs 00:02:04.0569 2400 RpcSs - ok 00:02:04.0659 2400 [ 0E11B35E972796042044BC27CE13B065 ] rspndr 00:02:04.0669 2400 rspndr - ok 00:02:04.0719 2400 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP 00:02:04.0729 2400 RSVP - ok 00:02:04.0769 2400 [ D507C1400284176573224903819FFDA3 ] rtl8139 00:02:04.0769 2400 rtl8139 - ok 00:02:04.0799 2400 [ 84885F9B82F4D55C6146EBF6065D75D2 ] SamSs 00:02:04.0799 2400 SamSs - ok 00:02:04.0839 2400 [ 25D8DE134DF108E3DBC8D7D23B1AA58E ] SCardSvr 00:02:04.0849 2400 SCardSvr - ok 00:02:04.0919 2400 [ 92360854316611F6CC471612213C3D92 ] Schedule 00:02:04.0939 2400 Schedule - ok 00:02:04.0969 2400 [ 7570380037993520842C2868121A01F9 ] Secdrv 00:02:04.0990 2400 Secdrv - ok 00:02:05.0010 2400 [ B1E0CE09895376871746F36DC5773B4F ] seclogon 00:02:05.0010 2400 seclogon - ok 00:02:05.0050 2400 [ DFD9870CF39C791D86C4C209DA9FA919 ] SENS 00:02:05.0060 2400 SENS - ok 00:02:05.0080 2400 [ A2D868AEEFF612E70E213C451A70CAFB ] serenum 00:02:05.0080 2400 serenum - ok 00:02:05.0100 2400 [ CD9404D115A00D249F70A371B46D5A26 ] Serial 00:02:05.0100 2400 Serial - ok 00:02:05.0130 2400 [ 0D13B6DF6E9E101013A7AFB0CE629FE0 ] Sfloppy 00:02:05.0130 2400 Sfloppy - ok 00:02:05.0210 2400 [ 36CC8C01B5E50163037BEF56CB96DEFF ] SharedAccess 00:02:05.0240 2400 SharedAccess - ok 00:02:05.0260 2400 [ 53D9184A21C5CBF600D918E51EF3A7E5 00:02:05.0270 2400 ShellHWDetection - ok 00:02:05.0290 2400 Simbad - ok 00:02:05.0310 2400 Sparrow - ok 00:02:05.0380 2400 [ 9BB1DD670CB7505A90FC4E61D4AA8227 ] splitter 00:02:05.0380 2400 splitter - ok 00:02:05.0430 2400 [ AD3D9D191AEA7B5445FE1D82FFBB4788 ] Spooler 00:02:05.0440 2400 Spooler - ok 00:02:05.0500 2400 [ E41B6D037D6CD08461470AF04500DC24 ] sr 00:02:05.0510 2400 sr - ok 00:02:05.0550 2400 [ 92BDF74F12D6CBEC43C94D4B7F804838 ] srservice 00:02:05.0570 2400 srservice - ok 00:02:05.0630 2400 [ 5230953C21C811B5FC1FF31AE2B48097 ] Srv 00:02:05.0660 2400 Srv - ok 00:02:05.0711 2400 [ 4B8D61792F7175BED48859CC18CE4E38 ] SSDPSRV 00:02:05.0721 2400 SSDPSRV - ok 00:02:05.0811 2400 [ 99646FD07C3437C8DBAC26D106044307 ] stisvc 00:02:05.0841 2400 stisvc - ok 00:02:05.0861 2400 [ 03C1BAE4766E2450219D20B993D6E046 ] swenum 00:02:05.0861 2400 swenum - ok 00:02:05.0891 2400 [ 94ABC808FC4B6D7D2BBF42B85E25BB4D ] swmidi 00:02:05.0891 2400 swmidi - ok 00:02:05.0911 2400 SwPrv - ok 00:02:05.0931 2400 symc810 - ok 00:02:05.0951 2400 symc8xx - ok 00:02:05.0971 2400 sym_hi - ok 00:02:05.0981 2400 sym_u3 - ok 00:02:06.0041 2400 [ 650AD082D46BAC0E64C9C0E0928492FD ] sysaudio 00:02:06.0051 2400 sysaudio - ok 00:02:06.0091 2400 [ 8B54AA346D1B1B113FFAA75501B8B1B2 ] SysmonLog 00:02:06.0101 2400 SysmonLog - ok 00:02:06.0161 2400 [ 1418A3A6E76E5A2E3F5E43866E793A8B ] TapiSrv 00:02:06.0181 2400 TapiSrv - ok 00:02:06.0241 2400 [ 64798ECFA43D78C7178375FCDD16D8C8 ] Tcpip 00:02:06.0271 2400 Tcpip - ok 00:02:06.0311 2400 [ 38D437CF2D98965F239B0ABCD66DCB0F ] TDPIPE 00:02:06.0321 2400 TDPIPE - ok 00:02:06.0341 2400 [ ED0580AF02502D00AD8C4C066B156BE9 ] TDTCP 00:02:06.0341 2400 TDTCP - ok 00:02:06.0382 2400 [ A540A99C281D933F3D69D55E48727F47 ] TermDD 00:02:06.0392 2400 TermDD - ok 00:02:06.0462 2400 [ C33E6F5FD9209F4543B5C0D37CEB742C ] TermService 00:02:06.0492 2400 TermService - ok 00:02:06.0542 2400 [ 53D9184A21C5CBF600D918E51EF3A7E5 ] Themes 00:02:06.0542 2400 Themes - ok 00:02:06.0592 2400 [ 37DB0A7D097310E8B4DE803FC3119C78 ] TlntSvr 00:02:06.0632 2400 TlntSvr - ok 00:02:06.0642 2400 TosIde - ok 00:02:06.0732 2400 [ 6D9AC544B30F96C57F8206566C1FB6A1 ] TrkWks 00:02:06.0742 2400 TrkWks - ok 00:02:06.0792 2400 [ 12F70256F140CD7D52C58C7048FDE657 ] Udfs 00:02:06.0802 2400 Udfs - ok 00:02:06.0822 2400 ultra - ok 00:02:06.0902 2400 [ 1F03139B77B21C6D84C688798808BC28 ] Update 00:02:06.0932 2400 Update - ok 00:02:06.0992 2400 [ 36ACA6CDC19C95FF468A1426EB7F32F0 ] upnphost 00:02:07.0022 2400 upnphost - ok 00:02:07.0052 2400 [ 3F5DF65B0758675F95A2D43918A740A3 ] UPS 00:02:07.0052 2400 UPS - ok 00:02:07.0113 2400 [ 35E69410D5A2F1DE386B37F4FC17AEB7 ] usbehci 00:02:07.0113 2400 usbehci - ok 00:02:07.0133 2400 [ DB53E336C44CB0975D7DCB35BAC0ECDA ] usbhub 00:02:07.0143 2400 usbhub - ok 00:02:07.0203 2400 [ 6CD7B22193718F1D17A47A1CD6D37E75 ] USBSTOR 00:02:07.0203 2400 USBSTOR - ok 00:02:07.0233 2400 [ B3671FBC569AFE9390175561F1AB335C ] usbuhci 00:02:07.0233 2400 usbuhci - ok 00:02:07.0263 2400 [ 8A60EDD72B4EA5AEA8202DAF0E427925 ] VgaSave 00:02:07.0263 2400 VgaSave - ok 00:02:07.0283 2400 ViaIde - ok 00:02:07.0303 2400 [ EE4660083DEBA849FF6C485D944B379B ] VolSnap 00:02:07.0313 2400 VolSnap - ok 00:02:07.0383 2400 [ 3EE00364AE0FD8D604F46CBAF512838A ] VSS 00:02:07.0413 2400 VSS - ok 00:02:07.0513 2400 [ 2B281958F5D0CF99ED626E3EF39D5C8D ] W32Time 00:02:07.0523 2400 W32Time - ok 00:02:07.0553 2400 [ 984EF0B9788ABF89974CFED4BFBAACBC ] Wanarp 00:02:07.0553 2400 Wanarp - ok 00:02:07.0583 2400 WDICA - ok 00:02:07.0653 2400 [ 0BFA8203B8148FB4E54BC212C41CE497 ] wdmaud 00:02:07.0653 2400 wdmaud - ok 00:02:07.0683 2400 [ 346E7D636ADFE4E3B1B32AF8326220FF ] WebClient 00:02:07.0693 2400 WebClient - ok 00:02:07.0804 2400 [ F399242A80C4066FD155EFA4CF96658E ] winmgmt 00:02:07.0824 2400 winmgmt - ok 00:02:07.0884 2400 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN 00:02:07.0894 2400 WmdmPmSN - ok 00:02:07.0974 2400 [ EC7D5EDC9519FC07FE03922FE94B77AD ] Wmi 00:02:08.0024 2400 Wmi - ok 00:02:08.0084 2400 [ BA8CECC3E813E1F7C441B20393D4F86C ] WmiApSrv 00:02:08.0094 2400 WmiApSrv - ok 00:02:08.0244 2400 [ F74E3D9A7FA9556C3BBB14D4E5E63D3B ] WMPNetworkSvc 00:02:08.0314 2400 WMPNetworkSvc - ok 00:02:08.0364 2400 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb 00:02:08.0374 2400 WpdUsb - ok 00:02:08.0455 2400 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL 00:02:08.0455 2400 WS2IFSL - ok 00:02:08.0505 2400 [ 478995B4555958E52388496618D9C678 ] wscsvc 00:02:08.0515 2400 wscsvc - ok 00:02:08.0545 2400 [ D29AD7484B98279ED21877DE051A180F ] wuauserv 00:02:08.0575 2400 wuauserv - ok 00:02:08.0605 2400 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf 00:02:08.0635 2400 WudfPf - ok 00:02:08.0675 2400 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd 00:02:08.0675 2400 WudfRd - ok 00:02:08.0715 2400 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc 00:02:08.0725 2400 WudfSvc - ok 00:02:08.0785 2400 [ B1F190A2BF52B8F4601C677F475CE5E5 ] WZCSVC 00:02:08.0825 2400 WZCSVC - ok 00:02:08.0875 2400 [ EEF46DAB68229A14DA3D8E73C99E2959 ] xmlprov 00:02:08.0895 2400 xmlprov - ok 00:02:08.0915 2400 ================ Scan global ============== 00:02:08.0985 2400 [ 00EF9C3AF83EDBAF18CA7A2837750117 00:02:09.0025 2400 [ A089EABF7F75B3C5E027979E4949999D 00:02:09.0085 2400 [ A089EABF7F75B3C5E027979E4949999D 00:02:09.0115 2400 [ C6CE6EEC82F187615D1002BB3BB50ED4 00:02:09.0115 2400 [Global] - ok 00:02:09.0125 2400 ================ Scan MBR ================= 00:02:09.0156 2400 [ 8F558EB6672622401DA993E1E865C861 00:02:09.0396 2400 DeviceHarddisk0DR0 - ok 00:02:09.0406 2400 ================ Scan VBR ================= 00:02:09.0416 2400 [ DBB27FAF8A5B630BE7304EB6C9C8E5E0 00:02:09.0416 2400 DeviceHarddisk0DR0Partition1 - ok 00:02:09.0436 2400 [ 6232A6799E956FD49966809BF3077CC9 00:02:09.0436 2400 DeviceHarddisk0DR0Partition2 - ok 00:02:09.0446 2400 =========================================== 00:02:09.0446 2400 Scan finished 00:02:09.0446 2400 =========================================== 00:02:09.0476 3572 Detected object count: 0 00:02:09.0476 3572 Actual detected object count: 0 00:02:14.0463 3032 Deinitialize success h не намери нищо tdsskiller и не беше Aug 24 2012 13:27:48 ================= 68 ================= (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054 ================= Type 0x7, StartLBA 0x3F, BlocksNum 0x639D9A7 Type 0x7, StartLBA 0x639DA25, BlocksNum 0x1F08BDDB ================= ================= ================= ================= ================= ======================== ================= D:WINDOWSsystem32DRIVERSACPI.sys D:WINDOWSsystem32driversACPIEC.sys D:WINDOWSsystem32driversaec.sys D:WINDOWSSystem32driversafd.sys D:WINDOWSsystem32DRIVERSagp440.sys D:WINDOWSsystem32driversALCXWDM.SYS D:WINDOWSsystem32alrsvc.dll D:WINDOWSSystem32alg.exe D:WINDOWSSystem32appmgmts.dll D:WINDOWSsystem32DRIVERSasyncmac.sys D:WINDOWSsystem32DRIVERSatapi.sys D:WINDOWSsystem32DRIVERSatmarpc.sys D:WINDOWSSystem32audiosrv.dll D:WINDOWSsystem32DRIVERSaudstub.sys D:WINDOWSsystem32driversBeep.sys D:WINDOWSsystem32qmgr.dll D:WINDOWSSystem32browser.dll D:WINDOWSsystem32DriversBTHport.sys D:WINDOWSSystem32bthserv.dll D:WINDOWSsystem32DriversBTHUSB.sys D:WINDOWSsystem32driverscbidf2k.sys D:WINDOWSsystem32driversCdaudio.sys D:WINDOWSsystem32driversCdfs.sys D:WINDOWSsystem32DRIVERScdrom.sys D:WINDOWSsystem32cisvc.exe D:WINDOWSsystem32clipsrv.exe D:WINDOWSSystem32cryptsvc.dll D:WINDOWSsystem32rpcss.dll D:WINDOWSSystem32dhcpcsvc.dll D:WINDOWSsystem32DRIVERSdisk.sys D:WINDOWSsystem32driversdmboot.sys D:WINDOWSsystem32driversdmio.sys D:WINDOWSsystem32driversdmload.sys D:WINDOWSSystem32dmserver.dll D:WINDOWSsystem32driversDMusic.sys D:WINDOWSSystem32dnsrslvr.dll D:WINDOWSsystem32driversdrmkaud.sys D:WINDOWSSystem32ersvc.dll D:WINDOWSsystem32services.exe D:WINDOWSsystem32es.dll D:WINDOWSsystem32driversFastfat.sys ] FastUserSwitchingCompatibility D:WINDOWSSystem32shsvcs.dll D:WINDOWSsystem32DRIVERSfdc.sys D:WINDOWSsystem32driversFips.sys D:WINDOWSsystem32driversFlpydisk.sys D:WINDOWSsystem32DRIVERSfltMgr.sys D:WINDOWSsystem32driversFs_Rec.sys D:WINDOWSsystem32DRIVERSftdisk.sys D:WINDOWSsystem32DRIVERSmsgpc.sys D:WINDOWSPCHealthHelpCtrBinariespchsvc.dll D:WINDOWSsystem32DRIVERShidusb.sys D:WINDOWSsystem32DriversHTTP.sys D:WINDOWSSystem32w3ssl.dll D:WINDOWSsystem32DRIVERSi8042prt.sys D:WINDOWSsystem32DRIVERSimapi.sys D:WINDOWSsystem32imapi.exe D:WINDOWSsystem32DRIVERSintelide.sys D:WINDOWSsystem32DRIVERSintelppm.sys D:WINDOWSsystem32DRIVERSIp6Fw.sys D:WINDOWSsystem32DRIVERSipfltdrv.sys D:WINDOWSsystem32DRIVERSipinip.sys D:WINDOWSsystem32DRIVERSipnat.sys D:WINDOWSsystem32DRIVERSipsec.sys D:WINDOWSsystem32DRIVERSirenum.sys D:WINDOWSsystem32DRIVERSisapnp.sys D:WINDOWSsystem32DRIVERSkbdclass.sys D:WINDOWSsystem32driverskmixer.sys D:WINDOWSsystem32driversKSecDD.sys D:WINDOWSSystem32srvsvc.dll ] lanmanworkstation D:WINDOWSSystem32wkssvc.dll D:WINDOWSSystem32lmhsvc.dll D:WINDOWSsystem32driversmbam.sys D:Program FilesMalwarebytes' Anti-Malwarembamscheduler.exe D:Program FilesMalwarebytes' Anti-Malwarembamservice.exe D:WINDOWSSystem32msgsvc.dll D:WINDOWSsystem32driversmnmdd.sys D:WINDOWSsystem32mnmsrvc.exe D:WINDOWSsystem32driversModem.sys D:WINDOWSsystem32DRIVERSmouclass.sys D:WINDOWSsystem32DRIVERSmouhid.sys D:WINDOWSsystem32driversMountMgr.sys D:WINDOWSsystem32DRIVERSmrxdav.sys D:WINDOWSsystem32DRIVERSmrxsmb.sys D:WINDOWSsystem32msdtc.exe D:WINDOWSsystem32driversMsfs.sys D:WINDOWSsystem32driversMSKSSRV.sys D:WINDOWSsystem32driversMSPCLOCK.sys D:WINDOWSsystem32driversMSPQM.sys D:WINDOWSsystem32DRIVERSmssmbios.sys D:WINDOWSsystem32driversMup.sys D:WINDOWSsystem32driversNDIS.sys D:WINDOWSsystem32DRIVERSndistapi.sys D:WINDOWSsystem32DRIVERSndisuio.sys D:WINDOWSsystem32DRIVERSndiswan.sys D:WINDOWSsystem32driversNDProxy.sys D:WINDOWSsystem32DRIVERSnetbios.sys D:WINDOWSsystem32DRIVERSnetbt.sys D:WINDOWSsystem32netdde.exe D:WINDOWSsystem32netdde.exe D:WINDOWSsystem32lsass.exe D:WINDOWSSystem32netman.dll D:WINDOWSSystem32mswsock.dll D:WINDOWSsystem32driversNpfs.sys D:WINDOWSsystem32driversNtfs.sys D:WINDOWSsystem32lsass.exe D:WINDOWSsystem32ntmssvc.dll D:WINDOWSsystem32driversNull.sys D:WINDOWSsystem32DRIVERSnv4_mini.sys D:WINDOWSsystem32nvsvc32.exe D:WINDOWSsystem32DRIVERSnwlnkflt.sys D:WINDOWSsystem32DRIVERSnwlnkfwd.sys D:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE D:WINDOWSsystem32DRIVERSparport.sys D:WINDOWSsystem32driversPartMgr.sys D:WINDOWSsystem32driversParVdm.sys D:WINDOWSsystem32DRIVERSpci.sys D:WINDOWSsystem32driversPCIIde.sys D:WINDOWSsystem32driversPcmcia.sys D:WINDOWSsystem32services.exe D:WINDOWSsystem32lsass.exe D:WINDOWSsystem32DRIVERSraspptp.sys ] ProtectedStorage D:WINDOWSsystem32lsass.exe D:WINDOWSsystem32DRIVERSpsched.sys D:WINDOWSsystem32DRIVERSptilink.sys D:WINDOWSsystem32DriversPxHelp20.sys D:WINDOWSsystem32DRIVERSrasacd.sys D:WINDOWSSystem32rasauto.dll D:WINDOWSsystem32DRIVERSrasl2tp.sys D:WINDOWSSystem32rasmans.dll D:WINDOWSsystem32DRIVERSraspppoe.sys D:WINDOWSsystem32DRIVERSraspti.sys D:WINDOWSsystem32DRIVERSrdbss.sys D:WINDOWSsystem32DRIVERSRDPCDD.sys D:WINDOWSsystem32DRIVERSrdpdr.sys D:WINDOWSsystem32driversRDPWD.sys D:WINDOWSsystem32sessmgr.exe D:WINDOWSsystem32DRIVERSredbook.sys D:WINDOWSSystem32mprdim.dll D:WINDOWSsystem32regsvc.dll D:WINDOWSsystem32locator.exe D:WINDOWSSystem32rpcss.dll D:WINDOWSsystem32DRIVERSrspndr.sys D:WINDOWSsystem32rsvp.exe D:WINDOWSsystem32DRIVERSRTL8139.SYS D:WINDOWSsystem32lsass.exe D:WINDOWSSystem32SCardSvr.exe D:WINDOWSsystem32schedsvc.dll D:WINDOWSsystem32DRIVERSsecdrv.sys D:WINDOWSSystem32seclogon.dll D:WINDOWSsystem32sens.dll D:WINDOWSsystem32DRIVERSserenum.sys D:WINDOWSsystem32DRIVERSserial.sys D:WINDOWSsystem32driversSfloppy.sys D:WINDOWSSystem32ipnathlp.dll ] ShellHWDetection D:WINDOWSSystem32shsvcs.dll D:WINDOWSsystem32driverssplitter.sys D:WINDOWSsystem32spoolsv.exe D:WINDOWSsystem32DRIVERSsr.sys D:WINDOWSsystem32srsvc.dll D:WINDOWSsystem32DRIVERSsrv.sys D:WINDOWSSystem32ssdpsrv.dll D:WINDOWSsystem32wiaservc.dll D:WINDOWSsystem32DRIVERSswenum.sys D:WINDOWSsystem32driversswmidi.sys D:WINDOWSsystem32driverssysaudio.sys D:WINDOWSsystem32smlogsvc.exe D:WINDOWSSystem32tapisrv.dll D:WINDOWSsystem32DRIVERStcpip.sys D:WINDOWSsystem32driversTDPIPE.sys D:WINDOWSsystem32driversTDTCP.sys D:WINDOWSsystem32DRIVERStermdd.sys D:WINDOWSSystem32termsrv.dll D:WINDOWSSystem32shsvcs.dll D:WINDOWSsystem32tlntsvr.exe D:WINDOWSsystem32trkwks.dll D:WINDOWSsystem32driversUdfs.sys D:WINDOWSsystem32DRIVERSupdate.sys D:WINDOWSSystem32upnphost.dll D:WINDOWSSystem32ups.exe D:WINDOWSsystem32DRIVERSusbehci.sys D:WINDOWSsystem32DRIVERSusbhub.sys D:WINDOWSsystem32DRIVERSUSBSTOR.SYS D:WINDOWSsystem32DRIVERSusbuhci.sys D:WINDOWSSystem32driversvga.sys D:WINDOWSsystem32driversVolSnap.sys D:WINDOWSSystem32vssvc.exe D:WINDOWSsystem32w32time.dll D:WINDOWSsystem32DRIVERSwanarp.sys D:WINDOWSsystem32driverswdmaud.sys D:WINDOWSSystem32webclnt.dll D:WINDOWSsystem32wbemWMIsvc.dll D:WINDOWSsystem32mspmsnsv.dll D:WINDOWSSystem32advapi32.dll D:WINDOWSsystem32wbemwmiapsrv.exe D:Program FilesWindows Media PlayerWMPNetwk.exe D:WINDOWSsystem32DRIVERSwpdusb.sys D:WINDOWSSystem32driversws2ifsl.sys D:WINDOWSsystem32wscsvc.dll D:WINDOWSsystem32wuauserv.dll D:WINDOWSsystem32DRIVERSWudfPf.sys D:WINDOWSsystem32DRIVERSwudfrd.sys D:WINDOWSSystem32WUDFSvc.dll D:WINDOWSSystem32wzcsvc.dll D:WINDOWSSystem32xmlprov.dll ================= ] D:WINDOWSsystem32basesrv.dll ] D:WINDOWSsystem32winsrv.dll ] D:WINDOWSsystem32winsrv.dll ] D:WINDOWSsystem32services.exe ================= ] DeviceHarddisk0DR0 ================= ] DeviceHarddisk0DR0Partition1 ] DeviceHarddisk0DR0Partition2 ================= ================= ttp://file.bg/c185160CHhUr нужно от рестарт.

Добре дошли!

Проблем с Flash player?

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)